siyuan-markdown

Fail

Audited by Socket on Mar 7, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The SFMarkdown Siyuan skill is coherently aligned with its stated purpose of handling Siyuan-style Markdown and enabling editor workflows via local API calls and scripts. The primary data exposure is to a local Siyuan API endpoint, which is expected in legitimate setups but should be secured if the endpoint could be exposed. No external data sinks or credential transfers are evident in the provided content. Overall risk is low to moderate (benign with cautious deployment); ensure local API security (authentication, access control) and validate that any included scripts are from trusted sources.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 7, 2026, 05:55 PM
Package URL
pkg:socket/skills-sh/zhiluop%2Fsiyuan-skills%2Fsiyuan-markdown%2F@f6017bc061120cff151420c7b42f537cb413d58f