find-skills
Warn
Audited by Socket on Aug 10, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's stated purpose matches its behavior, and it uses an official CLI path, but its main function is transitive installation of additional skills from potentially untrusted external sources. The biggest risk is expanding agent capabilities by importing third-party instructions with global, prompt-skipping install commands.
Confidence: 91%Severity: 62%
Audit Metadata