imsg
Warn
Audited by Socket on May 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The capability matches the stated purpose, but the skill grants access to highly sensitive local message history and enables outbound messaging with real-world consequences. No obvious credential theft or hidden exfiltration is present, yet the required permissions and send capability make it a medium-high risk skill that should only be used with strict per-message approval.
Confidence: 85%Severity: 68%
Audit Metadata