k2f-quotation

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The quotation guidance itself is benign and scoped to document creation, but it unnecessarily extends trust by instructing the agent to install a separate K2F skill and rely on additional tooling. The install path appears officially documented, so this is not confirmed malicious, yet the transitive skill installation and ambiguous downstream provenance make the overall skill medium risk.

Confidence: 89%Severity: 56%
Audit Metadata
Analyzed At
Oct 1, 2026, 01:32 PM
Package URL
pkg:socket/skills-sh/suzheng%2Fk2f%2Fk2f-quotation%2F@4d6fcbc534e68bf88119a5cdf4f4aa5bddd7bf2ae72636cf85243cd3500a9aeb