self-improve
Warn
Audited by Socket on Apr 28, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s core capabilities broadly match its stated purpose, and there is no strong evidence of credential theft or third-party data routing. However, it grants an AI agent a high degree of autonomous code execution and merge authority over a local repository, creating meaningful risk from unattended actions and from processing untrusted repository content with write/exec privileges.
Confidence: 87%Severity: 74%
Audit Metadata