krt-compound-master
Warn
Audited by Socket on May 20, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core orchestration purpose is coherent, but the skill materially expands its footprint by directing installation and use of multiple other skills, including release/Jira actors that can perform real-world actions. No direct credential theft or exfiltration is present in this file, yet the transitive trust and semi-autonomous workflow make it a medium-risk skill.
Confidence: 83%Severity: 58%
Audit Metadata