krt-compound-master

Warn

Audited by Socket on May 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core orchestration purpose is coherent, but the skill materially expands its footprint by directing installation and use of multiple other skills, including release/Jira actors that can perform real-world actions. No direct credential theft or exfiltration is present in this file, yet the transitive trust and semi-autonomous workflow make it a medium-risk skill.

Confidence: 83%Severity: 58%
Audit Metadata
Analyzed At
May 20, 2026, 07:10 AM
Package URL
pkg:socket/skills-sh/ElZaWarudo%2Fkrt%2Fkrt-compound-master%2F@c078e6372fa336c1b5256e75917a5cd15e480fa2
Security Audit — socket — krt-compound-master