add-new-opc-skill
Warn
Audited by Socket on Apr 12, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s main function is coherent project-maintenance guidance, but it embeds transitive skill-install instructions that extend trust to an external CLI and downstream skills. No direct credential theft or exfiltration is evident, yet the skill installation chain makes the overall footprint riskier than a simple documentation/checklist skill.
Confidence: 91%Severity: 58%
Audit Metadata