retro

Warn

Audited by Socket on Jun 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core retrospective workflow is legitimate, but this skill's actual footprint is much broader than its stated purpose. The embedded gstack framework preamble introduces optional telemetry/artifact sync, helper-binary trust, project file modification, and even git commits, which are disproportionate for a reporting skill. This looks more like an over-scoped framework skill than confirmed malware.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 17, 2026, 11:35 AM
Package URL
pkg:socket/skills-sh/findbene%2Fskills%2Fretro%2F@280d73160835f764f7d85a84ff90629e4b5c2634373dc414353f0f087c3d1138
Security Audit — socket — retro