init
Warn
Audited by Socket on Nov 8, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS due to unverifiable required CLI dependencies: the skill does not establish where canon and orchestra come from or how to verify them. The described workflow otherwise appears focused on local planning records, with no stated credential access or external data flow. Confirm CLI provenance before use.
Confidence: 87%Severity: 70%
Audit Metadata