new-project-setup
Warn
Audited by Socket on Oct 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is purpose-aligned as an orchestrator, but its core behavior is transitive skill installation and delegation. The install mechanism appears official and same-ecosystem, which lowers concern, yet the unpinned trust chain to multiple sibling skills makes this a medium-risk skill rather than benign.
Confidence: 91%Severity: 58%
Audit Metadata