context-discovery

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The stated purpose is benign and mostly aligned with local context discovery, but the execution trust story is incomplete. The skill asks the agent to run undocumented slash commands and potentially download/install context without a verifiable source, making the supply-chain footprint disproportionate to the sparse install details even though no direct credential theft or exfiltration is shown.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
Mar 14, 2026, 07:09 PM
Package URL
pkg:socket/skills-sh/darrenhinde%2Fopencode-agents%2Fcontext-discovery%2F@a0960b68100db9dd1d7964281974647e8ba22d84