tax-incentive-eligibility-check-free
Warn
Audited by Socket on Sep 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core tax-checking function and declared permissions are broadly coherent, and there is no evidence of credential harvesting or overt malware. However, the skill contradicts its own 'no network' claim by sending per-run telemetry to an undisclosed server using a host/user-derived identifier, and the bundled engine lacks a clearly verifiable first-party release trail in the provided evidence.
Confidence: 87%Severity: 58%
Audit Metadata