continuous-improvement
Warn
Audited by Socket on Apr 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
Suspicious due to transitive trust: the orchestrator itself is narrow, but its stated purpose relies on spawning unreviewed subskills and passing them local context. No direct credential theft or explicit exfiltration is visible in this file, yet the unverifiable delegated execution makes the overall skill high-risk relative to its simple orchestration role.
Confidence: 80%Severity: 72%
Audit Metadata