day-planner

Warn

Audited by Socket on May 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is largely aligned with a proactive day-planning purpose and does not show clear credential theft or malicious routing, but it combines silent execution with autonomous file edits, scheduler control, and optional ingestion of untrusted web content. The main concern is covert background operation plus prompt-injection exposure, not confirmed malware.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
May 14, 2026, 12:16 AM
Package URL
pkg:socket/skills-sh/CraftOS-dev%2FCraftBot%2Fday-planner%2F@77de66d870c59fc8213fd7aac523d673ae5da938
Security Audit — socket — day-planner