skill-finder
Fail
Audited by Socket on Mar 9, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill-finder's footprint is coherent with its stated purpose: it searches public sources, reads SKILL.md content for evaluation, and provides quality and fitness assessments to guide user choice. No credential access, unverifiable binaries, or outbound data exfiltration appears to be involved. The data flows are appropriate for a discovery-and-evaluate workflow, and the use of public GitHub content minimizes risk. Overall, the risk profile is low to moderate and aligns with a benign, utility-focused tool for recommending Claude skills.
Confidence: 98%
Audit Metadata