skills/wubing2023/paperspine/paper-spine-intake/Socket

paper-spine-intake

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose and local file-writing behavior are coherent, but it expands trust to a companion skill and launches local scripts with ExecutionPolicy Bypass. Same-org GitHub provenance reduces concern, yet mutable repo-based distribution and transitive skill execution make this higher risk than a simple documentation/config skill.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 13, 2026, 07:37 AM

Package URL

pkg:socket/skills-sh/WUBING2023%2FPaperSpine%2Fpaper-spine-intake%2F@925186b60413d1cd39a7cd462ced7d6f33ea9564