todo-processing

Fail

Audited by Socket on Mar 12, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's footprint is coherent with its stated purpose: it operates entirely on local todo files using standard shell commands to discover, validate, and manage todo items with proper frontmatter normalization. No external network access, credentials, or unsupported data flows are evident. The design is proportionate to the task (local file management) and maintains predictable data handling (read/write/rename of markdown files). Some minor risks include potential edge-case file conflicts during renaming and reliance on UNIX-like shell tools, which can be mitigated with guards and checks in implementation.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 12, 2026, 10:39 PM
Package URL
pkg:socket/skills-sh/erich3000%2Fji-agent-skills%2Ftodo-processing%2F@2e1f9bc007155e9283839bd03b8f4210190dd5f4
Security Audit — socket — todo-processing