wrangling-skills
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. Most sub-skills are benign documentation-style data wrangling guides, but streamline-analyst-guide expands scope by installing and running third-party code from a personal GitHub repo and may pass user datasets and an OpenAI API key into that code. This is internally plausible for the stated purpose, but trust and credential-forwarding risks make the overall skill set medium risk rather than benign.
Confidence: 90%Severity: 58%
Audit Metadata