openspec-ff-change

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill appears coherently aligned with its stated purpose of fast-forwarding artifact creation using a local OpenSpec workflow. Data flows are predominantly local filesystem reads/writes driven by CLI outputs, with no evident credential exposure or external network interactions. Overall risk is low-to-m moderate, contingent on trusted dependencies and proper user prompts. Recommend standard safeguards (validate user input, confirm artifact creation, confirm overwriting behavior, and ensure dependency artifacts are trusted).

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 08:44 PM
Package URL
pkg:socket/skills-sh/cachemoney%2Fagent-toolkit%2Fopenspec-ff-change%2F@df79c70eb71ae701d846043ccab31f6035a01024