quality-gate

Warn

Audited by Socket on May 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s behavior is mostly coherent and tightly scoped for read-only quality verification, with no visible exfiltration, credential harvesting, or mutation paths. The main concern is reliance on an unverifiable local knowledge-gate CLI; under the required scoring rules, that unresolved binary provenance keeps overall risk high despite otherwise proportionate capabilities.

Confidence: 85%Severity: 72%
Audit Metadata
Analyzed At
May 11, 2026, 03:03 AM
Package URL
pkg:socket/skills-sh/ether-moon%2Fknowledge-distillery%2Fquality-gate%2F@1a6238e42a096a07f17cfbb40bc08b4923b8bd2c
Security Audit — socket — quality-gate