newsletter-curation
Warn
Audited by Socket on Mar 20, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: mostly coherent with newsletter curation, but it expands into a networked CLI workflow with wildcard `infsh` Bash access, transitive skill installation, and processing of untrusted external content. The install path appears same-org and officially documented, reducing maliciousness concerns, but the skill’s trust footprint is broader than a simple writing/curation guide.
Confidence: 86%Severity: 56%
Audit Metadata