research
Warn
Audited by Socket on Apr 7, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's core purpose is coherent, and the Gemini fallback appears to use an official Google CLI, but the overall footprint is elevated by an unverifiable local Argus broker, background processing of untrusted web content, and a --yolo fallback that grants auto-approved actions disproportionate to simple research. Main concerns are opaque data routing and indirect prompt-injection exposure rather than confirmed malware.
Confidence: 87%Severity: 66%
Audit Metadata