grant-proposal
Warn
Audited by Socket on Apr 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's main behavior is broadly aligned with grant drafting, literature review, and external proposal review, but its footprint is somewhat oversized for that purpose: wildcard Bash access, transitive dependence on other skills, silent fallback execution, and export of proposal text to OpenAI Codex increase risk. There is no strong evidence of malware, credential theft, or hostile data routing, but the permissions and external review flow are broader than ideal for a writing skill.
Confidence: 84%Severity: 58%
Audit Metadata