web-doc-resolver
Warn
Audited by Socket on Mar 27, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s stated purpose is coherent and there are no clear credential-harvesting or malicious install behaviors, but it combines untrusted external web/search content with Bash-capable agent permissions, creating meaningful indirect prompt-injection risk disproportionate to a pure documentation resolver.
Confidence: 87%Severity: 58%
Audit Metadata