orchestrate
Warn
Audited by Socket on Mar 26, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the visible skill is only a thin wrapper around an unseen local workflow, so its true capabilities, data flows, and approval boundaries cannot be verified. The named Gemini CLI looks official, which lowers supply-chain concern, but the hidden orchestration logic and multi-agent execution make the overall footprint broader and less reviewable than the snippet alone suggests.
Confidence: 80%Severity: 56%
Audit Metadata