banana-skill-finder
Warn
Audited by Socket on Oct 9, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's behavior matches its stated purpose, but that purpose is to proactively search for and install other skills, creating significant transitive trust risk. Official endpoints and an official CLI reduce direct malware concerns, yet encouraging installation of arbitrary third-party skills is disproportionate enough to classify the skill as suspicious rather than benign.
Confidence: 91%Severity: 78%
Audit Metadata