learn
Warn
Audited by Socket on Apr 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The learning-management behavior is mostly coherent, but the skill exceeds its narrow stated scope by reading and writing `~/.superstack` telemetry state and sending events to a configurable remote URL. This is not confirmed malware, yet the unvalidated telemetry destination and extra home-directory access make it higher risk than a purely local knowledge-base skill.
Confidence: 87%Severity: 52%
Audit Metadata