skillify
Warn
Audited by Socket on May 3, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core skillification workflow is coherent and guarded by staging/tests/user approval, but the actual footprint is much broader than that purpose because the shared gstack preamble adds telemetry, git-based memory sync, routing injection, and other repo/config mutations. This is not confirmed malware, but it is a medium-risk skill with disproportionate side behavior and delegated execution through many local helper binaries.
Confidence: 83%Severity: 61%
Audit Metadata