synap-assistant

Fail

Audited by Socket on Mar 2, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

Benign. The skill/documentation describes a user-centric memory capture and retrieval tool with local-first data storage and optional Git-based multi-device synchronization. Data access patterns are user-directed, and there is no evidence of credential harvesting, external data exfiltration, or covert system access. Security risk is present mainly in user-configured sync flows (potential exposure if the remote is public or poorly secured), but this is consistent with a normal data-synchronization workflow for a personal productivity tool.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Mar 2, 2026, 03:31 AM
Package URL
pkg:socket/skills-sh/dparedesi%2Fagent-global-skills%2Fsynap-assistant%2F@57a04c610db094fcd3079917676bd8915a0f73b0