lfg
Warn
Audited by Socket on Mar 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated purpose matches an engineering workflow, but the skill is a thin orchestration layer that delegates to multiple external commands, creating a transitive-trust problem and enabling broad autonomous code-changing behavior with limited per-step user approval. No direct credential theft, exfiltration endpoint, or malicious payload appears in this fragment, but the chained execution model and immediate-action instruction make it medium risk.
Confidence: 87%Severity: 58%
Audit Metadata