upskill
Warn
Audited by Socket on Oct 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: mostly coherent with its stated purpose, but it carries medium risk from curl|bash installation, optional transitive skill installation, and deliberate capture/forwarding of session logs to model APIs. The behavior fits an UpSkill wrapper, so this is not confirmed malware, but the trust and privacy footprint is significant.
Confidence: 88%Severity: 56%
Audit Metadata