goal-tracker

Warn

Audited by Socket on Aug 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated goal-tracking behavior is coherent and locally scoped, but the skill’s core functionality depends on unverifiable local executables/scripts with no confirmed publisher, source repository, official installer, or release verification. There is no direct evidence of credential theft or malicious data routing in the visible skill, so this is not confirmed malware, but it remains high risk due to opaque code execution.

Confidence: 85%Severity: 78%
Audit Metadata
Analyzed At
Aug 19, 2026, 07:48 PM
Package URL
pkg:socket/skills-sh/bighardperson%2Fcomputer-science-skills-collection%2Fgoal-tracker%2F@f98ded84d8a8bea3cee33f5b9638f6b2daebc5a7703ef0b14f5aee99e47b3db3
Security Audit — socket — goal-tracker