status
Warn
Audited by Socket on Aug 26, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s purpose matches its local status-reading behavior, and there are no external installs or network flows, but it uses load-time shell execution and unsafely interpolates a file-derived path into cat commands. Risk is moderate due to pre-execution local file disclosure, not confirmed malware.
Confidence: 90%Severity: 54%
Audit Metadata