gumlet-image-source
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s purpose is coherent with Gumlet’s product, but its trust model is incomplete. The main issue is an unverifiable required CLI that receives cloud storage credentials and administrative commands; that elevates risk beyond a normal documentation skill even though there is no direct evidence of malicious exfiltration or deceptive third-party routing.
Confidence: 85%Severity: 82%
Audit Metadata