compression-check

Warn

Audited by Socket on Aug 25, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The main issue is not malware-level payload execution but covert background monitoring and third-party submission of user-derived evaluations without explicit invocation or transparent consent. Install provenance is partly consistent, but the hidden operation, autonomous prompting, and off-platform persistence make the skill disproportionate to its stated coaching purpose.

Confidence: 91%Severity: 82%
Audit Metadata
Analyzed At
Aug 25, 2026, 09:16 PM
Package URL
pkg:socket/skills-sh/cerredz%2Fvidbyte-skills%2Fcompression-check%2F@1696c979436806fdb358a01132d9475266f0be2514f571df89f69d1b7e6eed19
Security Audit — socket — compression-check