yzr-llm-wiki-management

Warn

Audited by Socket on Sep 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's local wiki-management behavior is mostly coherent with its stated purpose, and the flagged backticks are benign documentation-style directives. The main issue is install/execution trust: nearly all impactful behavior is delegated to an unverified `llmw` CLI whose publisher and official distribution path could not be confirmed, plus optional external-repo cloning from arbitrary remotes. This is not confirmed malware, but it carries meaningful supply-chain and black-box execution risk.

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
Sep 5, 2026, 12:07 PM
Package URL
pkg:socket/skills-sh/yzr95924%2Fllm-workspace-cli%2Fyzr-llm-wiki-management%2F@29388b95d1261cd1e57addba6acaf1e19e8428f29a0e6480c83b3721b51e88a1
Security Audit — socket — yzr-llm-wiki-management