the-hit
Warn
Audited by Socket on Apr 26, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's coding-orchestration purpose broadly matches its behavior, and it does not request credentials or route data to external domains. However, it depends on unverifiable internal gangsta:* skills and enforces automatic cross-skill progression without pause or confirmation, creating transitive trust and autonomy risk disproportionate to a simple workflow guide.
Confidence: 88%Severity: 62%
Audit Metadata