plan-ceo-review

Warn

Audited by Socket on Mar 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The review behavior mostly matches the stated purpose, but the skill executes unverifiable local `gstack-*` binaries and can hand control to another local upgrade skill. There is no clear credential theft or exfiltration in the provided text, yet install/execution trust is insufficiently verifiable, so the skill should be treated as high security risk rather than confirmed malware.

Confidence: 86%Severity: 78%
Audit Metadata
Analyzed At
Mar 16, 2026, 04:42 PM
Package URL
pkg:socket/skills-sh/garrytan%2Fgstack%2Fplan-ceo-review%2F@f6696cbd3a9dbe5bef39a7a9523b7cc741dcf40c