siem-rule-generator
Warn
Audited by Socket on Sep 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill does not show malware or exfiltration behavior, but its broad Bash/file permissions are poorly justified by a vague, boilerplate SIEM-rule-generator purpose. Risk comes from disproportionate execution scope and lack of concrete boundaries, not from supply-chain or credential-forwarding evidence.
Confidence: 89%Severity: 61%
Audit Metadata