skills/cerredz/vidbyte-skills/retain/Socket

retain

Warn

Audited by Socket on Aug 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s behavior mostly matches its stated purpose, but it exports conversation-derived content to an external service through a third-party CLI installed from a weakly verified publisher path. This looks more like a medium-risk hosted integration and trust-chain issue than confirmed malicious behavior.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Aug 25, 2026, 09:19 PM

Package URL

pkg:socket/skills-sh/cerredz%2Fvidbyte-skills%2Fretain%2F@cd5d133176a813b5212dd4d5d55d94f6df19d13f0f92b617e0ed34359fed6a4d