brains-trust

Warn

Audited by Socket on Mar 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is broadly aligned with its stated purpose, but it has meaningful security risk because it sends local context and file contents to external AI services, relies on a third-party model-discovery endpoint, and generates/executes Python code that handles API keys. This looks more like a high-data-exposure consultation tool than malware, but its trust and data-flow boundaries should be treated cautiously.

Confidence: 87%Severity: 66%
Audit Metadata
Analyzed At
Mar 13, 2026, 08:51 AM
Package URL
pkg:socket/skills-sh/jezweb%2Fclaude-skills%2Fbrains-trust%2F@661454a8e12b63f65dd977dab1e0b73a07ab5702