plan-tune

Warn

Audited by Socket on May 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core profile/preference features are coherent, and the helper tooling appears same-org rather than a random external payload. But this skill's actual footprint is much broader than its stated purpose: it can trigger telemetry, artifact sync, routing injection, repo edits, and commits. The main concern is scope and data-flow overreach, not confirmed malware.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
May 11, 2026, 08:08 PM
Package URL
pkg:socket/skills-sh/garrytan%2Fgstack%2Fplan-tune%2F@401e7d54594dee49c608ffcac298b962ee1cc4e4