refactoring-specialist
Warn
Audited by Socket on Mar 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The visible refactoring behavior is benign and proportionate, but the undocumented automatic/background hooks introduce unverified transitive trust and unclear logging/learning data flows. No direct malware indicators or download-execute chains are present, yet the hidden hook behavior makes the skill riskier than a normal documentation/refactoring guide.
Confidence: 81%Severity: 61%
Audit Metadata