fizzy-workflow
Warn
Audited by Socket on Mar 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the workflow is mostly aligned with its stated Fizzy card-management purpose, but it expands trust in two notable ways: it requires an external standalone CLI binary and instructs installation of a second skill, creating a transitive trust chain. Data flows are otherwise proportionate and there is no clear credential harvesting or malicious exfiltration behavior in the provided instructions.
Confidence: 80%Severity: 62%
Audit Metadata