parallels-discord-roundtrip
Warn
Audited by Socket on Apr 24, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
The skill is mostly aligned with its stated Parallels/Discord testing purpose, but its preferred workflow is more sensitive than necessary because it pulls a Discord token from a remote host credential file over SSH and injects it into the harness. No clear malicious or deceptive behavior is present, but the credential handling and multi-host execution make this a medium-risk, mildly suspicious skill rather than a fully benign one.
Confidence: 84%Severity: 53%
Audit Metadata