doc-generator

Warn

Audited by Socket on Jul 25, 2026

1 alert found:

Anomaly
AnomalyLOW
skill.md

SUSPICIOUS: the documentation-generation behavior is mostly aligned with purpose, but the self-evolving post-invocation hook adds autonomous persistence and future self-modification, and the externally observed install chain relies on a separately branded GitHub source with limited provenance evidence. No direct credential theft, exfiltration endpoint, or exploit behavior is present in the provided skill text.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
Jul 25, 2026, 09:45 AM
Package URL
pkg:socket/skills-sh/theneoai%2Fskill-writer%2Fdoc-generator%2F@62bc49b44ca763f3ac4253a68a4c3befae2690411ac0f28c563b7fac0badaf39
Security Audit — socket — doc-generator