ai-create-techspec

Warn

Audited by Socket on Jul 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core purpose is coherent, but the skill goes beyond local tech-spec authoring by mandating external searches and automatically committing/pushing vault changes to a configured remote. No clear malware or credential-harvesting behavior appears, but the external data flows and autonomous networked actions make it medium risk.

Confidence: 85%Severity: 61%
Audit Metadata
Analyzed At
Jul 7, 2026, 02:45 PM
Package URL
pkg:socket/skills-sh/cristiano-pacheco%2Fai-tools%2Fai-create-techspec%2F@1e1de9cb9771d52b44b8d658a4ccdac2a8136a02096bd7c72400c5db00ce3e03
Security Audit — socket — ai-create-techspec