personal-wiki

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated purpose and local file-writing behavior are coherent for a personal wiki, and there is no sign of credential theft or exfiltration. However, the skill relies on transitive PDF/OCR skills, one of which (`image-ocr`) is not verified by the provided same-org evidence, and it processes untrusted external content while writing persistent files. That makes the skill medium risk rather than benign.

Confidence: 86%Severity: 56%
Audit Metadata
Analyzed At
Apr 10, 2026, 05:21 AM
Package URL
pkg:socket/skills-sh/cshen%2FSKILLS%2Fpersonal-wiki%2F@28cad2c4d5198edf9635fef9f0e1139d9ba2d549