using-superantigravity
Fail
Audited by Socket on Feb 28, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
This is a governance/policy document that by itself contains no direct malicious code, but it materially increases supply-chain and data-exfiltration risk by mandating frequent, unconditional loading of external skill files without integrity, provenance, or sandboxing requirements. Treat the policy as a moderate security risk: not directly malicious, but dangerous in practice unless combined with strict allowlisting, signature verification, sandboxed execution, and minimal privilege for loaded skills.
Confidence: 98%
Audit Metadata