hindsight

Warn

Audited by Socket on Jun 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s memory and hook capabilities broadly match its stated purpose, and the Hindsight CLI appears to be a legitimate project. However, automatic capture of prompts/edits/errors, autonomous background journaling, and a custom endpoint that is rerouted via /etc/hosts create medium security risk and weaker data-flow integrity than a direct, clearly official deployment path.

Confidence: 81%Severity: 58%
Audit Metadata
Analyzed At
Jun 23, 2026, 03:22 AM
Package URL
pkg:socket/skills-sh/delorenj%2F00_ceiling%2Fhindsight%2F@93d51e169226053cfd6267f0e3362ab9f8a9b13f02acc0a9fa5df3cd5fd6ae45
Security Audit — socket — hindsight