k2f-research-poster

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The poster-design purpose is benign and the visible instructions are mostly documentation-like, but the skill’s core dependency is a transitive remote skill install. Because it asks the agent to load another skill that is not included here, and source naming is somewhat inconsistent, the main risk is trust expansion rather than overtly malicious behavior.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Oct 1, 2026, 12:04 PM
Package URL
pkg:socket/skills-sh/suzheng%2Fk2f%2Fk2f-research-poster%2F@30a1a6ff5eb0303b99888c13f74e03e2b639a80f7173f22a87092b6f685e4634