game-3d-asset-pipeline
Warn
Audited by Socket on Jul 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core asset-pipeline purpose is coherent, but the skill has medium risk because it combines broad autonomous project changes, third-party provider routing, authenticated browser uploads, and self-modification with an unpinned `npx skiller@latest` execution path. No confirmed credential theft or overtly malicious behavior is present, but install trust and scope are broader than ideal.
Confidence: 79%Severity: 62%
Audit Metadata