vp-foreign-agent-skill-loader
Warn
Audited by Socket on Oct 6, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's stated purpose matches its behavior, but it is a loader for untrusted foreign skill instructions and therefore materially increases indirect prompt-injection and transitive-trust risk. No direct malware indicators, credential harvesting, or remote installers are present in the provided snippet.
Confidence: 87%Severity: 58%
Audit Metadata