replit-debug-bundle
Warn
Audited by Socket on Sep 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill mostly matches its stated Replit debugging purpose and uses official Replit endpoints, but it has unnecessary load-time pre-execution, disables TLS verification for the database probe, and collects potentially sensitive KV/database-related output into a bundle meant for sharing. Not confirmed malware, but the data collection and pre-exec behavior make it medium risk for a support/debug skill.
Confidence: 92%Severity: 56%
Audit Metadata