compresso
Warn
Audited by Socket on Apr 24, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
Mostly coherent documentation for a local media-compression app, with low direct exfiltration risk and no credential harvesting. The main concern is the transitive skill installation command pointing to a different GitHub repo/org, which weakens install trust and makes the skill overall suspicious rather than fully benign.
Confidence: 85%Severity: 58%
Audit Metadata