encrypting-and-decrypting-data
Warn
Audited by Socket on Sep 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The overall purpose is plausible, but the skill is internally inconsistent: it claims to validate crypto practices while also performing live encryption/decryption through an insufficiently specified plugin. No clear exfiltration or overtly malicious behavior is shown, but the external plugin opacity, unclear key handling, and broader-than-needed Bash scope create medium security risk.
Confidence: 76%Severity: 52%
Audit Metadata