mgrep-code-search
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core capability mostly matches the stated purpose, and install provenance is relatively coherent, but the skill understates a key data-flow fact: `mgrep watch` uploads/indexes repository content with a remote Mixedbread service rather than performing purely local search. This makes the skill higher risk than a normal code-search helper, though not malicious based on the available evidence.
Confidence: 89%Severity: 58%
Audit Metadata