gm

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose is broad engineering orchestration, but its actual footprint is disproportionately powerful. Same-org provenance reduces the chance of outright malware, yet mandatory remote-script bootstrap, execution of an external runner, heavy autonomy, and untrusted-content ingestion with write/exec authority make it high-risk.

Confidence: 87%Severity: 74%
Audit Metadata
Analyzed At
Sep 18, 2026, 10:27 AM
Package URL
pkg:socket/skills-sh/anentrypoint%2Fgm%2Fgm%2F@51aef73df5d5e01835d554dab043f9f74d07ecd2021b3614fde61dcd6c826700
Security Audit — socket — gm