press-release-writing
Warn
Audited by Socket on Aug 6, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core writing purpose is benign, but the skill expands its trust boundary by instructing installation of another unverified skill (`belt-sh/cli`) instead of using the publisher's documented belt install path. Research via external search services is plausible for fact-checking, yet the transitive install plus broad Bash access make the overall footprint disproportionate to a press-release helper.
Confidence: 87%Severity: 72%
Audit Metadata