evolve-context
Warn
Audited by Socket on Apr 10, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's documented purpose and file access are coherent for context/documentation maintenance, and no explicit external data exfiltration path is shown. However, it relies on an undisclosed bootstrap that installs a local CLI with no verifiable provenance, checksums, signatures, or official release evidence, so install/execution trust is materially high risk.
Confidence: 85%Severity: 78%
Audit Metadata