schema-validator
Warn
Audited by Socket on Sep 26, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill's stated schema-audit purpose is mostly coherent, but it relies on several opaque local Python wrappers with unverified provenance and likely credential/API forwarding. No direct malware or obvious exfiltration endpoint is shown, but the helper-script trust boundary is too broad and insufficiently transparent for a benign classification.
Confidence: 85%Severity: 74%
Audit Metadata