Skills
skills/wauputr4/qalam-assist/qalam-assist-write-ebook/Socket

qalam-assist-write-ebook

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The writing workflow is purpose-aligned and includes good approval controls, but it relies on transitive installation of a third-party GitHub skill and an unofficial NotebookLM CLI, creating meaningful supply-chain and trust-boundary risk disproportionate to a simple authoring assistant.

Confidence: 87%Severity: 74%
Audit Metadata
Analyzed At
Jul 16, 2026, 12:13 PM
Package URL
pkg:socket/skills-sh/wauputr4%2Fqalam-assist%2Fqalam-assist-write-ebook%2F@d06ba2a42d51330abcca37ff2c0b4f3b872f77de19264fc04ff4f5cbeb3a195c
Security Audit — socket — qalam-assist-write-ebook