to-spec
Warn
Audited by Socket on Aug 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core purpose is coherent, but this variant adds an unverified transitive setup command and enables autonomous external posting. The mismatch with the upstream official setup name is the strongest concern; combined with issue-tracker publishing, this makes the skill medium-high risk rather than benign.
Confidence: 88%Severity: 72%
Audit Metadata