zeude
Warn
Audited by Socket on Apr 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core purpose is coherent for enterprise adoption analytics, but the actual footprint is broad: command interception, prompt telemetry, centralized hook/skill deployment, and a mismatched third-party skill install path. The combination creates meaningful supply-chain and transitive-trust risk even without clear proof of malicious intent.
Confidence: 87%Severity: 82%
Audit Metadata