talk-to
Warn
Audited by Socket on Apr 11, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's messaging purpose is coherent, but it relies on opaque internal commands and a shell-based notifier with unverifiable provenance, and it enables autonomous multi-turn agent-to-agent messaging without per-action approval. Risk is driven more by opaque execution and autonomous behavior than by confirmed malware or explicit credential theft.
Confidence: 82%Severity: 64%
Audit Metadata