auto-dream
Warn
Audited by Socket on Apr 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core behavior matches a memory-maintenance skill, but it grants broad local read/write/bash access and enables unattended cron-driven modifications to future-session context. Data appears to stay within local files and the official Claude CLI/API, so this is not clear malware or credential theft, but the autonomous headless operation and partially unreviewed local scripts make it a medium-risk skill.
Confidence: 81%Severity: 58%
Audit Metadata