ai-rag-pipeline
Warn
Audited by Socket on Aug 6, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's purpose is coherent, but it relies on transitive skill installation, broad Bash access, and a gateway CLI whose install instructions do not cleanly match official docs. Data flows are plausible for a hosted RAG platform, yet user queries and retrieved content are funneled through third-party services, so overall risk is medium rather than benign.
Confidence: 86%Severity: 62%
Audit Metadata