longform-skill-distiller

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is largely coherent for a meta-workflow that turns long-form content into local agent skills, and it does not directly exfiltrate data or request credentials. The main risk is transitive: it creates, installs, and integrates new skills into the agent's live ecosystem, and it references third-party evolution tooling (darwin-skill / skills CLI) that extends the trust boundary beyond official same-org sources. This is not confirmed malware, but it is higher-risk than an ordinary documentation or summarization skill because it changes the agent's future behavior through generated skill installation.

Confidence: 85%Severity: 64%
Audit Metadata
Analyzed At
Oct 5, 2026, 01:14 PM
Package URL
pkg:socket/skills-sh/snowfrost%2Fskill-movie%2Flongform-skill-distiller%2F@1e99df28502d7120b47aebac918421d3521e649f530d65737265e035103c698f