ooo
Warn
Audited by Socket on Jul 3, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core workflow, credential needs, and official pip/plugin installs are broadly consistent with a spec-first development assistant, but the third-party transitive skill installation path is a notable trust anomaly. Overall this looks more like a legitimate automation skill with meaningful supply-chain and autonomy risk than confirmed malicious behavior.
Confidence: 86%Severity: 64%
Audit Metadata