knowledge-absorber

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated purpose and capabilities mostly align, and the only explicit credential is appropriate for optional official Wan generation. However, the skill processes untrusted external content, invokes unseen local scripts, and uses dynamic browser tooling, so its true data flows and injection defenses cannot be fully verified from the provided text alone.

Confidence: 81%Severity: 56%
Audit Metadata
Analyzed At
Apr 28, 2026, 05:56 PM
Package URL
pkg:socket/skills-sh/wwwzhouhui%2Fskills_collection%2Fknowledge-absorber%2F@e9c8d7a2fd0d7cbc670dc95d71b2c9c48fe8c26e