product-inspiration
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core purpose is coherent, and the visible external service (Tavily) appears official, so this is not outright malicious. However, the skill is overpowered for a research/inspiration workflow because it combines untrusted web intake with Write+Bash and a transitive /electron skill dependency of unknown provenance, creating medium risk of unsafe file changes or inherited trust abuse.
Confidence: 84%Severity: 61%
Audit Metadata