loci-post-edit
Warn
Audited by Socket on Apr 9, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose is coherent, but the skill relies on unverifiable local analysis binaries/scripts and an undisclosed MCP backend. No clear credential theft or overtly malicious behavior is shown, yet install/execution trust and endpoint transparency are insufficient for a benign rating.
Confidence: 84%Severity: 82%
Audit Metadata