bonus-stack
Warn
Audited by Socket on Aug 11, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The core copywriting purpose is mostly coherent, but the skill’s footprint includes local helper execution, telemetry, upgrade orchestration, and transitive skill trust that are broader than necessary. No confirmed malware or direct credential theft is visible, but the required RMBC helper binaries are not publicly verifiable from the provided evidence, which keeps overall risk high.
Confidence: 81%Severity: 78%
Audit Metadata