lov-feedback-loop

Warn

Audited by Socket on Sep 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated feedback-loop purpose is plausible, and the helper appears to be a real Lovstudio-associated PyPI package, but the skill’s true instructions are encrypted, dynamically decrypted, and then executed/obeyed without review. That hidden-behavior model, plus transitive skill installation and external helper control, makes the footprint insufficiently transparent for its claimed purpose.

Confidence: 85%Severity: 76%
Audit Metadata
Analyzed At
Sep 11, 2026, 02:50 AM
Package URL
pkg:socket/skills-sh/lovstudio%2Fskills%2Flov-feedback-loop%2F@521b839cc6891883a3457cfbb40507d76a1f15909b6bfe184fff23f9e59570ae
Security Audit — socket — lov-feedback-loop