skills/suzheng/k2f/k2f-legal-notice/Socket

k2f-legal-notice

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS due to transitive skill installation, not because of the legal-notice drafting behavior itself. The core purpose and capabilities are coherent and no credentials or exfiltration paths are requested, but instructing the agent to install a separate third-party skill meaningfully increases trust and execution risk.

Confidence: 90%Severity: 56%

Audit Metadata

Analyzed At

Oct 1, 2026, 12:32 PM

Package URL

pkg:socket/skills-sh/suzheng%2Fk2f%2Fk2f-legal-notice%2F@8b7e90662e0c4576269427a3561e2eca90c3387139e0bc60270284992b6873a9