post-impl

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is minimally scoped in text but acts as a launcher for an opaque external workflow with potential real-world actions. No direct exfiltration or obviously malicious behavior is shown, yet the true behavior depends on the Synapse CLI and unseen workflow definition, so risk is medium rather than benign.

Confidence: 78%Severity: 54%
Audit Metadata
Analyzed At
Mar 28, 2026, 04:41 AM
Package URL
pkg:socket/skills-sh/s-hiraoku%2Fsynapse-a2a%2Fpost-impl%2F@9abd6b53a5c7828aecfc3bbea15014d5716a3e4b