intake
Warn
Audited by Socket on Aug 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s purpose and capabilities are mostly aligned and it does not request credentials, exfiltrate data, or contain install/download commands. The main risk is dependence on unspecified nks_* MCP tools with unverified provenance, plus medium exposure from handling untrusted external content in a write-capable agent workflow.
Confidence: 80%Severity: 52%
Audit Metadata