qa

Warn

Audited by Socket on May 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core browser-QA-plus-bug-fix behavior is coherent, but the skill’s actual footprint is much broader than QA. Optional telemetry, brain-sync to GitHub, routing injection, and reliance on multiple local helper binaries make scope and data flows disproportionate to the stated purpose. This looks more like a general gstack agent framework wrapper than a narrowly scoped QA skill.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
May 3, 2026, 08:18 AM
Package URL
pkg:socket/skills-sh/garrytan%2Fgstack%2Fqa%2F@0b48f4ee9323d6c187e9db5c42b5f370443e0d92