skills/tiangong-ai/agent-skills/document-granular-decompose/Socket

document-granular-decompose

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s behavior matches its document-extraction purpose, but it uploads local files and forwards a bearer token to an environment-configured host that is not pinned to an official domain. No malicious execution or deceptive installer is present, yet the data-flow trust model is broad enough to warrant medium risk.

Confidence: 90%Severity: 58%

Audit Metadata

Analyzed At

Sep 14, 2026, 08:13 AM

Package URL

pkg:socket/skills-sh/tiangong-ai%2Fagent-skills%2Fdocument-granular-decompose%2F@51d436a3de1b5919ca53c8f9280ae888f0b0ae6fac4330d360573fe969a684a6