test-audit

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose mostly matches the repository-audit behavior, and there is no clear exfiltration or credential harvesting path in the skill text. The main risk is trust: the skill depends on many opaque local gstack executables and eval-based shell integration whose provenance is not established here, giving it a broader and less verifiable execution footprint than a simple test-audit workflow needs.

Confidence: 81%Severity: 72%
Audit Metadata
Analyzed At
Oct 2, 2026, 11:07 PM
Package URL
pkg:socket/skills-sh/garrytan%2Fgstack%2Ftest-audit%2F@88d3f85c6793809d9bf250b7cc1443ca1ebb82c0c3b514eaf766e894b649acd3
Security Audit — socket — test-audit