skill-review-audit

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The analyzed artifact is a governance/audit scaffold (non-executable, read-only) intended to inspect AI agent skills for risks and quality. Its footprint is coherent with its stated purpose: it does not itself perform agent actions, relies on inspecting SKILL.md and related assets, and emphasizes safe, authorized improvements. The main risk domains would arise if the tool is extended to modify skills or fetch external resources during review; current content suggests a safe, informational utility. Ensure strict non-mutating operation unless explicit authorization is granted, and confirm provenance and access controls for any included scan utilities or external references.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 08:23 PM
Package URL
pkg:socket/skills-sh/okwinds%2Fmiscellany%2Fskill-review-audit%2F@9491152b29877c19a9226ebf8c3248f37a0fbd18