Hooks Automation
Warn
Audited by Socket on Aug 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s purpose broadly matches hook automation, but it grants a third-party CLI wide authority over command hooks, persistent memory, metrics, and agent orchestration. Install source is moderately trustworthy via npm/same-ecosystem evidence, yet the automatic shell-hook execution and parameter interpolation make the overall footprint higher-risk than a typical formatting or session helper.
Confidence: 81%Severity: 66%
Audit Metadata