zero-defect

Warn

Audited by Socket on Apr 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the visible skill text is benign process guidance, but it is not self-contained and requires transitive invocation of other community skills with partially unclear provenance. The main risk is external instruction loading and unpinned community skill supply chain, not direct credential theft or exfiltration in this skill itself.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
Apr 27, 2026, 08:28 PM
Package URL
pkg:socket/skills-sh/sharpdeveye%2Fmaestro%2Fzero-defect%2F@12cb7dd19dac9ea581ac1fd1e87e32108e92ce96