merge-discipline

Warn

Audited by Socket on Sep 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core merge-discipline behavior is coherent with its stated purpose and most shell commands are normal workflow instructions, but the skill creates medium risk through transitive skill installation instructions, especially the wildcard install path. It is not confirmed malware and shows no covert exfiltration, hidden execution, or credential harvesting.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Sep 6, 2026, 10:19 AM
Package URL
pkg:socket/skills-sh/fudesign2008%2Fopen-skills%2Fmerge-discipline%2F@e871b7c4a8dd9a31d109a7cdf80201df2661c4f2729503739538dd1f29b7483f
Security Audit — socket — merge-discipline