reinforce-skills
Warn
Audited by Socket on Oct 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's capabilities mostly match its stated purpose of reinforcing agent memory, and the only executable dependency is the official Vercel/Next.js codemod via npm. However, it persistently rewrites CLAUDE.md with forceful behavioral directives, scans user-level Claude skill/plugin directories, and uses mutable remote npx execution, making it higher-risk than a normal documentation helper even without clear exfiltration or credential theft.
Confidence: 90%Severity: 50%
Audit Metadata