auto-dream

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core behavior matches a memory-maintenance skill, but it grants broad local read/write/bash access and enables unattended cron-driven modifications to future-session context. Data appears to stay within local files and the official Claude CLI/API, so this is not clear malware or credential theft, but the autonomous headless operation and partially unreviewed local scripts make it a medium-risk skill.

Confidence: 81%Severity: 58%
Audit Metadata
Analyzed At
Apr 30, 2026, 12:34 PM
Package URL
pkg:socket/skills-sh/notque%2Fclaude-code-toolkit%2Fauto-dream%2F@49cc1726e436a58734817d11be0a1a71a2f940c2