doc-generator
Warn
Audited by Socket on Jul 25, 2026
1 alert found:
AnomalyAnomalyskill.md
LOWAnomalyLOW
skill.md
SUSPICIOUS: the documentation-generation behavior is mostly aligned with purpose, but the self-evolving post-invocation hook adds autonomous persistence and future self-modification, and the externally observed install chain relies on a separately branded GitHub source with limited provenance evidence. No direct credential theft, exfiltration endpoint, or exploit behavior is present in the provided skill text.
Confidence: 82%Severity: 58%
Audit Metadata