recall-dump

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the purpose is coherent, but the skill's trust chain is incomplete because it relies on an ambiguous external `recall` CLI with no pinned or verifiable provenance in the skill itself. The main risk is executing an unverifiable dependency that receives full conversation content and may perform unknown local or network processing.

Confidence: 87%Severity: 78%
Audit Metadata
Analyzed At
Aug 6, 2026, 02:19 AM
Package URL
pkg:socket/skills-sh/edheltzel%2FRecall%2Frecall-dump%2F@a112aefc4fc7e0bbb26cb4524d8a634a386405f10cedaa4fd272dfc7e3b44979