go
Warn
Audited by Socket on Mar 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is coherent with its stated purpose, but that purpose is to globally install/uninstall other skills through an external CLI. Same-org provenance reduces malware concern, yet the transitive trust chain plus raw GitHub installer and skipped confirmations make this a medium-to-high security risk.
Confidence: 84%Severity: 68%
Audit Metadata