steamer
Warn
Audited by Socket on May 31, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The visible steamer file is mostly a documentation/instruction skill and does not itself contain code execution, exfiltration, or credential forwarding. However, its actual footprint extends toward high-sensitivity data collection from chats, email, local databases, and iMessage Full Disk Access, while deferring implementation to a companion engine/CLI not specified here. That creates scope and transitive-trust concerns disproportionate to a simple 'distillation' guide, even though the stated purpose and outputs are coherent. No confirmed malicious behavior is present in the provided file alone.
Confidence: 83%Severity: 52%
Audit Metadata