find-skills
Warn
Audited by Socket on Mar 18, 2026
1 alert found:
AnomalyAnomalySKILL_CN.md
LOWAnomalyLOW
SKILL_CN.md
The code fragment is a coherent, benign documentation piece for a Skills discovery and installation helper. It does not introduce unexpected capabilities, credential requirements, or data exfiltration paths beyond normal CLI interactions with public registries and GitHub-hosted skills. While it references external sources and installation steps, these are standard for ecosystem tooling and are appropriate to the stated purpose. No hidden or autonomous actions are evident. Recommend benign security posture with typical user-driven installation risks (e.g., ensure trust in discovered skills, review permissions before installation).
Confidence: 70%Severity: 65%
Audit Metadata