personal-siyuan-standards

Warn

Audited by Socket on Aug 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the instruction set is coherent for SiYuan note management and shows no direct malware behavior, but it relies on an underspecified MCP server with unclear provenance and broad access to personal notes. Main risk is trust in the external MCP layer and possible sync-based data exposure, not the skill text itself.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Aug 27, 2026, 06:33 PM
Package URL
pkg:socket/skills-sh/wmy2981%2Fskills%2Fpersonal-siyuan-standards%2F@5972ed3e51406bca6b04d036fa8e0a9d79d650d6aaf2e2a34988d9fa26ad8731
Security Audit — socket — personal-siyuan-standards