task-tracker

Fail

Audited by Socket on Mar 7, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill presents a coherent local task-tracking workflow that uses Markdown files to persist task context across sessions. Its operations are limited to local filesystem manipulation with no network calls or credential handling, aligning with its stated purpose. While there is a minor command-sanitization consideration due to shell command usage, the overall footprint is proportionate and benign for a locally stored task-tracking tool. No evidence of data leakage, credential exposure, or supply-chain risk is detected in the described implementation.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 7, 2026, 09:08 AM
Package URL
pkg:socket/skills-sh/xu-cell%2Fai-engineering-init%2Ftask-tracker%2F@17c030028d67d26eb59588723fe69326a879e85b