collect

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose broadly matches its behavior, but it is high-trust automation that fetches untrusted external content, lets subagents analyze/write based on that content, and sends outbound notifications automatically. The main concerns are autonomous real-world actions and indirect prompt-injection exposure, not clear malware or credential theft.

Confidence: 87%Severity: 69%
Audit Metadata
Analyzed At
Mar 28, 2026, 09:19 PM
Package URL
pkg:socket/skills-sh/aster110%2Fmycc%2Fcollect%2F@248bf09727eca9208508ebc40061964d097a5826
Security Audit — socket — collect