understand-setup
Warn
Audited by Socket on Sep 21, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose fits local setup analysis, but the skill relies on a local, unverifiable Python module and local dashboard code path with broad access to `~/.claude`. No direct malicious exfiltration is shown, yet the install/execution trust is weak enough to classify this as high security risk rather than benign.
Confidence: 84%Severity: 78%
Audit Metadata