soia-pkm-transform-article-notebooklm

Warn

Audited by Socket on Jul 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能目的总体合理,但安装方式与权限范围偏大:通过远程技能仓库转移安装,并请求 `-a '*'` 通配权限,与文章转学习产物这一用途不完全匹配。未见明确窃密、隐藏执行或恶意外传证据,因此更适合归类为 SUSPICIOUS/中高风险,而非确认恶意。

Confidence: 87%Severity: 74%
Audit Metadata
Analyzed At
Jul 17, 2026, 06:45 AM
Package URL
pkg:socket/skills-sh/soia-team%2Fsoia-open-skills%2Fsoia-pkm-transform-article-notebooklm%2F@215906199081e109963866ac7032ccd729690e4f3fb793b8426d9b60eb70ee0d
Security Audit — socket — soia-pkm-transform-article-notebooklm