dot-dash

Warn

Audited by Socket on Oct 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s monitoring behavior broadly matches its dashboard purpose, but it is a third-party bash-launched extension that reads local Claude transcript files, exposes them through a browser/WebSocket surface, and intentionally injects prompts into sessions. The footprint is coherent but high-impact and not well-scoped for low-trust environments.

Confidence: 82%Severity: 62%
Audit Metadata
Analyzed At
Oct 3, 2026, 10:28 AM
Package URL
pkg:socket/skills-sh/jamie-bitflight%2Fclaude_skills%2Fdot-dash%2F@cebc0b126d66b46a0fca7414fc6265750f40380ca61a8c6277411ba92c1f487e