skill-system-insight
Warn
Audited by Socket on Apr 11, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is broadly aligned with a memory/evolution purpose and shows no explicit external credential theft or remote exfiltration, but it has medium risk because untrusted session content can drive persistent DB/filesystem changes, including writes into sibling skill directories. The main concern is scope and autonomy of profile/recipe mutation rather than malware or supply-chain abuse.
Confidence: 81%Severity: 57%
Audit Metadata