analyze

Fail

Audited by Socket on Mar 1, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

This skill description is coherent with its stated purpose and does not contain remote download/execute chains, credential harvesting, or obfuscated malicious code. The primary security considerations are operational: copying user-local slash-command files into the repository and committing them can propagate unreviewed content. Require explicit user review/consent before copying and committing local files, and avoid giving any automation agent unattended write/commit privileges. Overall risk is low-to-moderate when used with appropriate human review.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Mar 1, 2026, 08:22 AM
Package URL
pkg:socket/skills-sh/jschulte%2Fclaude-plugins%2Fanalyze%2F@939c3ea69a58da89fa34436dc8761196add7e81b