automatic-stateful-prompt-improver

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose matches prompt optimization, but its footprint is broader than necessary because it automatically forwards many user prompts—including potentially sensitive domains—to an external learning MCP service and stores feedback/history without clear privacy or retention constraints. Supply-chain risk is moderate rather than high because the referenced backend has public source and there is no raw download-execute path shown, but the undocumented MCP trust boundary keeps this above benign.

Confidence: 85%Severity: 57%
Audit Metadata
Analyzed At
Sep 23, 2026, 06:12 PM
Package URL
pkg:socket/skills-sh/curiositech%2Fsome_claude_skills%2Fautomatic-stateful-prompt-improver%2F@1d863f98ea695921bd59c305418da04e06403ffb1b65dd1f094353696b43ef47
Security Audit — socket — automatic-stateful-prompt-improver