skills/endokelp/decisioncouncil/council/Socket

council

Warn

Audited by Socket on Jun 27, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core council workflow matches its stated purpose, but the skill expands trust by asking users to install separate third-party companion skills and by routing decisions through untrusted web-research inputs handled by sub-agents. The main concern is transitive skill installation and prompt-injection exposure, not confirmed malware.

Confidence: 84%Severity: 62%

Audit Metadata

Analyzed At

Jun 27, 2026, 08:16 AM

Package URL

pkg:socket/skills-sh/Endokelp%2FDecisionCouncil%2Fcouncil%2F@497d96f98765c626516efaa2934a4e3a39538035de44a0a16e0bdbf233226456