Security audit
Security checks across malware telemetry and agentic risk
The skill appears intended to organize Word documents locally, but it needs review because it can overwrite user files and automatically install a Python package despite claiming no network or system-management access is needed.
Review before installing. Use this only on copies of documents or specify an explicit output_path, and do not allow the dependency install step unless you are comfortable with pip modifying the Python environment. There is no artifact-backed evidence of malware or data theft, but the overwrite default and under-disclosed package installation should be fixed or clearly confirmed by the user.
64/64 vendors flagged this skill as clean.
Detected: suspicious.generated_source_template_injection
