dream

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's core behavior is coherent with its stated purpose, and there is no strong sign of malware or deceptive installer behavior. However, it performs broad harvesting of local conversation histories and forwards distilled content into an external/networked knowledge system (Sibyl) without specifying endpoints, auth flow, or data minimization. The main risk is privacy and memory-poisoning scope, not overt maliciousness.

Confidence: 83%Severity: 56%
Audit Metadata
Analyzed At
Apr 21, 2026, 08:27 PM
Package URL
pkg:socket/skills-sh/hyperb1iss%2Fhyperskills%2Fdream%2F@9c26d031b7ae52d55600e6d06cde38ac68a05d1b