skillify

Warn

Audited by Socket on May 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core skillification workflow is coherent and guarded by staging/tests/user approval, but the actual footprint is much broader than that purpose because the shared gstack preamble adds telemetry, git-based memory sync, routing injection, and other repo/config mutations. This is not confirmed malware, but it is a medium-risk skill with disproportionate side behavior and delegated execution through many local helper binaries.

Confidence: 83%Severity: 61%
Audit Metadata
Analyzed At
May 3, 2026, 02:25 PM
Package URL
pkg:socket/skills-sh/garrytan%2Fgstack%2Fskillify%2F@0d4afc0a6c2d2a2364ccb9a8ff865194c1da9ce4