share
Warn
Audited by Socket on Apr 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the planned behavior is broadly consistent with a session-sharing skill, but it handles sensitive local transcripts, forwards secrets from 1Password into external CLIs, and produces remote share links. Risk is elevated by broad data scope, optional Telegram dissemination, unpinned tooling, and self-modifying instructions, though there is no clear evidence of hidden credential theft or off-purpose endpoints.
Confidence: 83%Severity: 61%
Audit Metadata