recall-dump
Warn
Audited by Socket on Aug 6, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the purpose is coherent, but the skill's trust chain is incomplete because it relies on an ambiguous external `recall` CLI with no pinned or verifiable provenance in the skill itself. The main risk is executing an unverifiable dependency that receives full conversation content and may perform unknown local or network processing.
Confidence: 87%Severity: 78%
Audit Metadata