session-analyst

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is coherent and the visible data flow is local-only, but the skill delegates core behavior to an unverifiable local shell script. With no source or provenance for evolve-collect.sh, execution trust is insufficient for a benign classification even though there is no direct evidence of exfiltration or malicious intent in the provided text.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Sep 21, 2026, 05:06 PM
Package URL
pkg:socket/skills-sh/kmshihab7878%2Fclaude-code-setup%2Fsession-analyst%2F@242491dbda5316045fbe3be840f2d2a200c3e8a55295edcdc804415c2e06cc0b