gamma-local-dev-loop
Fail
Audited by Socket on Mar 11, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill's footprint is coherent with its stated purpose: it provides a locally scoped development loop with optional mock behavior, uses standard npm-based tooling, and only introduces credentials in real-mode operation. The data flows are appropriate for a development environment, and there are no evident hijacks or exfiltration patterns. The primary security considerations are the handling of GAMMA_API_KEY in real mode and ensuring credentials are kept in environment variables rather than hard-coded. Overall, the risk is low to moderate and proportionate to a local dev helper with optional mocking.
Confidence: 98%
Audit Metadata