reflect
Warn
Audited by Socket on Sep 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core behavior aligns with a reflection/self-improvement skill, but it weakens approval controls, writes persistent changes, and routes session-derived data to an unspecified Memory MCP service. External tool provenance is underspecified rather than overtly malicious, so this looks like a medium-risk, trust-ambiguous skill rather than confirmed malware.
Confidence: 82%Severity: 58%
Audit Metadata