retro

Warn

Audited by Socket on May 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core retrospective workflow is legitimate, but this skill's actual footprint is much broader than its stated purpose. The embedded gstack framework preamble introduces optional telemetry/artifact sync, helper-binary trust, project file modification, and even git commits, which are disproportionate for a reporting skill. This looks more like an over-scoped framework skill than confirmed malware.

Confidence: 81%Severity: 64%
Audit Metadata
Analyzed At
May 15, 2026, 05:28 PM
Package URL
pkg:socket/skills-sh/garrytan%2Fgstack%2Fretro%2F@b44e9d9849d5a6c1568d061844d43053d6bd1196
Security Audit — socket — retro