evidence-case-viewer
Warn
Audited by Socket on Aug 26, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s capabilities mostly fit its stated purpose as a local evidence viewer, but it sends full case context to an unspecified localhost subagent service and enables agent-driven verdict/course-correction actions. Main concerns are local service trust, transitive skill trust, and prompt-injection exposure rather than confirmed malware.
Confidence: 81%Severity: 53%
Audit Metadata