lit-pm

Warn

Audited by Socket on Mar 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s stated purpose is coherent with its orchestration behavior, local file use, and specialist delegation, so it does not look malicious. However, it materially expands trust through multiple transitive skill dependencies and processes substantial untrusted external content with write/delegation capability, making it a moderate-risk orchestration skill rather than a benign single-purpose local helper.

Confidence: 84%Severity: 52%
Audit Metadata
Analyzed At
Mar 20, 2026, 01:20 PM
Package URL
pkg:socket/skills-sh/dangeles%2Fclaude%2Flit-pm%2F@9d6e6d9906367e5c8aa8a1a679b6a9160f855a40