skills/suzheng/k2f/k2f-idml/Socket

k2f-idml

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's stated purpose is coherent for editorial/IDML authoring, and it does not request disproportionate credentials or show exfiltration behavior. However, it instructs the agent to install another skill (`suzheng/k2f`), creating a meaningful transitive trust risk; this is the main security concern.

Confidence: 92%Severity: 52%

Audit Metadata

Analyzed At

Oct 1, 2026, 12:34 PM

Package URL

pkg:socket/skills-sh/suzheng%2Fk2f%2Fk2f-idml%2F@710b6bfa91f01a2becf1b2b21ec37583375804be7b55e284438ab63dcc8d80f0