paper-spine

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s writing/research purpose broadly matches its file access and artifact generation, but it mandates execution of an unseen local PowerShell launcher with escalated permissions and relies on many unseen branch skills/scripts. That makes the trust footprint larger than what can be verified from this skill alone, with moderate risk from transitive trust and external-content processing rather than clear malicious intent.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 13, 2026, 03:37 AM
Package URL
pkg:socket/skills-sh/wubing2023%2Fpaperspine%2Fpaper-spine%2F@95ecc4f6f8b84ee4e544058d56b6d91cb3b8f74e0c38173adfbaeea8b6e1d77d
Security Audit — socket — paper-spine