dot-dash
Warn
Audited by Socket on Oct 3, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s monitoring behavior broadly matches its dashboard purpose, but it is a third-party bash-launched extension that reads local Claude transcript files, exposes them through a browser/WebSocket surface, and intentionally injects prompts into sessions. The footprint is coherent but high-impact and not well-scoped for low-trust environments.
Confidence: 82%Severity: 62%
Audit Metadata