retro
Warn
Audited by Socket on May 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core retrospective workflow is legitimate, but this skill's actual footprint is much broader than its stated purpose. The embedded gstack framework preamble introduces optional telemetry/artifact sync, helper-binary trust, project file modification, and even git commits, which are disproportionate for a reporting skill. This looks more like an over-scoped framework skill than confirmed malware.
Confidence: 81%Severity: 64%
Audit Metadata