brains-trust
Warn
Audited by Socket on Mar 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill is broadly aligned with its stated purpose, but it has meaningful security risk because it sends local context and file contents to external AI services, relies on a third-party model-discovery endpoint, and generates/executes Python code that handles API keys. This looks more like a high-data-exposure consultation tool than malware, but its trust and data-flow boundaries should be treated cautiously.
Confidence: 87%Severity: 66%
Audit Metadata