codekb-extract
Warn
Audited by Socket on Aug 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s extraction purpose is coherent, but install trust and data-flow transparency are incomplete. The main concern is the unverified `codekb` CLI dependency and unclear routing of code content/API keys during LLM-powered extraction, not confirmed malicious behavior.
Confidence: 82%Severity: 58%
Audit Metadata