openspec-sync-specs

Pass

Audited by Socket on Apr 17, 2026

Checks

Malicious behaviorInjection, exfiltration, untrusted installs

Security concernsCredential exposure, tool/trust exploitation

Code obfuscationHidden or obfuscated code

Suspicious patternsReconnaissance, excessive autonomy, resource use

Audit Metadata

Analyzed At

Apr 17, 2026, 02:14 AM

Package URL

pkg:socket/skills-sh/cachemoney%2Fagent-toolkit%2Fopenspec-sync-specs%2F@f2134db0931ebce537639ff7c33a62de3b1abd62