bonus-stack

Warn

Audited by Socket on Aug 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The core copywriting purpose is mostly coherent, but the skill’s footprint includes local helper execution, telemetry, upgrade orchestration, and transitive skill trust that are broader than necessary. No confirmed malware or direct credential theft is visible, but the required RMBC helper binaries are not publicly verifiable from the provided evidence, which keeps overall risk high.

Confidence: 81%Severity: 78%
Audit Metadata
Analyzed At
Aug 11, 2026, 01:37 PM
Package URL
pkg:socket/skills-sh/coleschaffer%2Fdtc-copywriting-skills%2Fbonus-stack%2F@b374b3fae2a9bc6d2b5816599cdd705b46edc1dfeb92b196b6eb3bec653b361c