bonus-stack

Warn

Audited by Socket on Aug 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The core copywriting purpose is mostly coherent, but the skill’s footprint includes local helper execution, telemetry, upgrade orchestration, and transitive skill trust that are broader than necessary. No confirmed malware or direct credential theft is visible, but the required RMBC helper binaries are not publicly verifiable from the provided evidence, which keeps overall risk high.

Confidence: 81%Severity: 78%
Audit Metadata
Analyzed At
Aug 11, 2026, 01:37 PM
Package URL
pkg:socket/skills-sh/coleschaffer%2Fdtc-copywriting-skills%2Fbonus-stack%2F@b374b3fae2a9bc6d2b5816599cdd705b46edc1dfeb92b196b6eb3bec653b361c
Security Audit — socket — bonus-stack