merge-discipline
Warn
Audited by Socket on Sep 6, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core merge-discipline behavior is coherent with its stated purpose and most shell commands are normal workflow instructions, but the skill creates medium risk through transitive skill installation instructions, especially the wildcard install path. It is not confirmed malware and shows no covert exfiltration, hidden execution, or credential harvesting.
Confidence: 87%Severity: 58%
Audit Metadata