office-hours
Warn
Audited by Socket on Jul 7, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core office-hours behavior is legitimate, but the skill's operational footprint is much broader than its stated design-doc purpose: it reads extensive local state, may modify repo files and commit them, and can send metadata/content to optional remote services through helper binaries, search, sync, and second-opinion tooling. This looks more like a full gstack agent bootstrap wrapper than a narrowly scoped brainstorming skill.
Confidence: 82%Severity: 63%
Audit Metadata