chofex-hackathon
Warn
Audited by Socket on Oct 19, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill is broadly aligned with hackathon participation, but its footprint is high-risk: it can install and run a mutable CLI, handle sensitive personal data, and perform real-world submissions and public/organizational posting on the participant's behalf. The main concern is excessive autonomous authority and supply-chain trust, not confirmed malware or covert exfiltration.
Confidence: 82%Severity: 74%
Audit Metadata