ground-claim
Warn
Audited by Socket on Aug 12, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS due to reliance on an unverifiable local binary whose provenance is not established in the skill. Aside from that trust gap, the capability scope is coherent for local literature-note grounding and shows no explicit credential harvesting, network exfiltration, or remote-code download behavior.
Confidence: 83%Severity: 72%
Audit Metadata