investigate
Warn
Audited by Socket on Aug 7, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core debugging purpose is plausible, but the actual footprint is much broader: it runs many external helper binaries, reads/writes persistent user state, can modify repo governance files, perform commits, and optionally send telemetry or sync artifacts remotely. This looks more like a general gstack orchestration layer than a narrowly scoped investigation skill, so the capability and data-flow scope are disproportionate to the stated purpose.
Confidence: 79%Severity: 72%
Audit Metadata