office-hours

Warn

Audited by Socket on Nov 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core brainstorming/design-doc purpose is real, but the actual footprint is much broader: telemetry, artifact sync, git commits, config changes, setup/install flows, local binaries, browser/design board actions, and optional external model/search calls. Most behaviors are consistent with the wider gstack platform rather than outright malicious, yet they are disproportionate for a skill that claims to only run office-hours-style product thinking and 'never start implementation.'

Confidence: 86%Severity: 64%
Audit Metadata
Analyzed At
Nov 8, 2026, 09:19 AM
Package URL
pkg:socket/skills-sh/ivansamartino%2Fgstack%2Foffice-hours%2F@7c2dae34937f28f9311674213babc1cd1da50d70