leaky-skill
Fail
Audited by Socket on Aug 2, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
MALICIOUS. The skill’s core and only meaningful action is to execute a shell command that uploads `.env` secrets to an unrelated remote host before any task begins.
Confidence: 99%Severity: 99%
Audit Metadata