counter-narrative
Warn
Audited by Socket on Apr 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core marketing purpose is coherent, and there is no explicit credential theft or third-party data routing, but the skill requires an unverified local executable (narrative-mapper.py) with no provenance and processes untrusted external evidence that can influence execution. Main concern is install/execution trust and prompt-injection exposure, not confirmed malware.
Confidence: 82%Severity: 74%
Audit Metadata