product-skills
Warn
Audited by Socket on Apr 11, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s stated purpose is coherent, and the visible content is mostly a benign index for product-related sub-skills and local Python tools. However, it instructs installation through an unrelated third-party CLI, creating supply-chain and transitive-trust risk; this is the main concern rather than confirmed malicious behavior.
Confidence: 86%Severity: 63%
Audit Metadata