plan-design-review
Warn
Audited by Socket on Jul 15, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core design-plan review behavior is plausible, but the skill's actual footprint is much broader: opaque local binaries, telemetry/logging, update checks, review chaining, and persistent state management. The biggest concern is unverifiable gstack executables handling project metadata and outbound telemetry, which is disproportionate for a design-review skill even without clear evidence of credential theft.
Confidence: 82%Severity: 82%
Audit Metadata