recall

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is largely coherent for a personal memory-recall workflow and does not show overt malware behavior, but it relies on a custom joelclaw CLI whose network/auth flows are opaque and whose provenance is weaker than standard registry-backed tools. Data access is broad but mostly proportional to the recall purpose, so this looks like a medium-risk memory skill rather than confirmed malicious content.

Confidence: 84%Severity: 53%
Audit Metadata
Analyzed At
Sep 23, 2026, 05:05 PM
Package URL
pkg:socket/skills-sh/joelhooks%2Fjoelclaw%2Frecall%2F@664c342f51dc832b881c5a147731c2443140b44787c9313018503f72134a508f
Security Audit — socket — recall