update-claude-documentation

Fail

Audited by Socket on Feb 28, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

This is a documentation maintenance skill whose capabilities align with its stated purpose: reading and updating repository markdown files and skill metadata. There are no direct supply-chain or network exfiltration indicators in the provided text. Minor to moderate risks: (1) the mandatory use of an unspecified 'Superpowers plugin' (trust depends on that plugin's provenance and permissions), and (2) the enforced automatic updating of MEMORY.md and NEXT_FEATURES.md at every session — if performed without human review or secret-sanitization, this could accidentally expose internal details or credentials in repo docs. Recommend: require human review/approval before committing updates, add explicit redaction/sanitization steps for MEMORY.md, and document/trust-evaluate the Superpowers plugin before enabling it.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Feb 28, 2026, 12:11 PM
Package URL
pkg:socket/skills-sh/peterbamuhigire%2Fskills-web-dev%2Fupdate-claude-documentation%2F@93cba7cace2150d39e00e820113ab26f2f1e19af