init

Warn

Audited by Socket on Nov 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS due to unverifiable required CLI dependencies: the skill does not establish where canon and orchestra come from or how to verify them. The described workflow otherwise appears focused on local planning records, with no stated credential access or external data flow. Confirm CLI provenance before use.

Confidence: 87%Severity: 70%
Audit Metadata
Analyzed At
Nov 8, 2026, 10:00 AM
Package URL
pkg:socket/skills-sh/andrewy1n%2Forchestra%2Finit%2F@c057b6cb065233c8d8af483ab8166457b584972c9ed89cc9fc064aa6f853874b