directory-submission
Audited by Socket on Mar 12, 2026
1 alert found:
Obfuscated FileThe directory-submission skill presents a coherent and proportionate footprint for its stated purpose: it reads (when available) a structured product context, optionally enriches with web data, and generates platform-tailored copy and readiness artifacts for directory submissions. There are no credential or install/execution risks, no obvious data exfiltration pathways, and no autonomous actions with real-world consequences beyond content generation. The primary risk lies in external web enrichment if untrusted sources are used; this can be mitigated by restricting sources to reputable sites and validating content. Overall, the security posture is Benign with a low to medium suspicion due to data-enrichment steps, but not malicious.