skill-builder
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated purpose matches scraping and skill-building, but the footprint is broad and depends on an external MCP server with under-specified trust, endpoints, and action controls. No direct credential theft or obviously malicious behavior is shown, yet upload/install/export capabilities make this a medium-risk skill until the MCP server provenance and data flows are verified.
Confidence: 77%Severity: 56%
Audit Metadata