ecosystem-reasoning
Warn
Audited by Socket on Sep 25, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose as an ecosystem router mostly matches the orchestration behavior, but the skill expands trust by installing and invoking many other skills through an unseen local installer script. No direct malicious exfiltration is visible in this excerpt, yet the transitive installation and delegated execution make the overall skill higher risk than a normal reasoning helper.
Confidence: 85%Severity: 72%
Audit Metadata