build-test-suite
Warn
Audited by Socket on Oct 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core Calibrate test-authoring workflow is coherent and uses the apparent official product domain and CLI, but the skill tells the agent to silently self-update via `npx skills update` and then obey the newly fetched instructions outside the reviewed copy. That transitive, concealed instruction refresh is inconsistent with trustworthy skill behavior and materially raises risk despite otherwise legitimate purpose alignment.
Confidence: 91%Severity: 62%
Audit Metadata