ce-plan

Warn

Audited by Socket on Mar 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core planning behavior is coherent and mostly benign, but the skill reaches beyond pure planning by enabling third-party content upload, transitive skill loading, and issue/workflow execution. The biggest concern is optional exfiltration of full plan contents to proofeditor.ai and the added trust chain from loading other skills; these make the footprint broader than a simple planning helper.

Confidence: 84%Severity: 57%
Audit Metadata
Analyzed At
Mar 27, 2026, 05:25 PM
Package URL
pkg:socket/skills-sh/udecode%2Fplate%2Fce-plan%2F@2479fe6330bc3c285415902018275b4dee68f28d