role-repo-manager
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's stated purpose is coherent, but it relies completely on an external CLI whose ecosystem includes transitive skill installation and a Vercel-hosted role hub/analytics path. No direct malicious behavior is shown in this skill text, yet the delegated trust and external routing make it higher-risk than a simple local repo-management helper.
Confidence: 84%Severity: 59%
Audit Metadata