update-doc

Fail

Audited by Socket on Mar 10, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's stated purpose (updating existing Markdown docs under .chalk/docs/) is coherent with its described workflow and capabilities. It uses local file access only, does not require credentials, and does not involve external networks or third-party binaries. Security risk is low-to-moderate (primarily due to potential inadvertent inclusion of sensitive content in docs) and remains within expected scope for a documentation-editing tool. No evidence of malicious behavior or credential harvesting. Recommend continuing with normal usage, but advise users to sanitize content before committing updates to shared docs.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 10, 2026, 11:37 AM
Package URL
pkg:socket/skills-sh/GeneralJerel%2Fchalk-skills%2Fupdate-doc%2F@92978753c7231acee958a283444ec38884853aa6