setup
Warn
Audited by Socket on Aug 10, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s core purpose and local config access are coherent, and it has good guardrails around consent and secret handling. Risk comes from transitive installation of third-party agent skills/plugins and external tooling from personal GitHub repos, which broadens the trust chain beyond what a local setup helper strictly needs.
Confidence: 88%Severity: 62%
Audit Metadata