openspec-sync

Pass

Audited by Socket on Jun 13, 2026

Checks

Malicious behaviorInjection, exfiltration, untrusted installs

Security concernsCredential exposure, tool/trust exploitation

Code obfuscationHidden or obfuscated code

Suspicious patternsReconnaissance, excessive autonomy, resource use

Audit Metadata

Analyzed At

Jun 13, 2026, 04:14 AM

Package URL

pkg:socket/skills-sh/full-statck-skills%2Fopenspec-skills%2Fopenspec-sync%2F@0058a4b8b94f77f79886e5927758aa4c53947435dc5c9f988a0b88d49b4b7ba2