qmd
Warn
Audited by Socket on Mar 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The code fragment describes a benign, locally-focused search tool with ML-enhanced capabilities. Its footprint is coherent with its purpose. While not malicious, the typical supply-chain risks from external model downloads and integration hooks should be mitigated with standard integrity checks and access controls. No evidence of credential harvesting or data exfiltration is present in the provided material.
Confidence: 75%Severity: 75%
Audit Metadata