research-session

Warn

Audited by Socket on May 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is mostly coherent as a research-session orchestrator, but its footprint is broader than a simple briefing tool because it has bash, edit/write, web access, local binary execution, and can commit/push to a remote repo. No clear credential harvesting or malicious exfiltration appears, and there is no external download/execute chain, but the unresolved provenance of the local mental-gym binary and the ability to take real-world git actions make this a medium-risk orchestration skill rather than benign.

Confidence: 82%Severity: 57%
Audit Metadata
Analyzed At
May 11, 2026, 08:09 AM
Package URL
pkg:socket/skills-sh/andrehuang%2Fresearcher-pack%2Fresearch-session%2F@27680c9a18b1acdcabcb608145711bc8174f2577
Security Audit — socket — research-session