workflow-architect
Warn
Audited by Socket on Sep 2, 2026
1 alert found:
AnomalyAnomalyskills/observer/SKILL.md
LOWAnomalyLOW
skills/observer/SKILL.md
SUSPICIOUS. The core capability fits workflow inference, and there are no external installs, credentials, or third-party data sinks. However, the deliberate silent/invisible monitoring of session history and cross-session analysis, plus transitive local skill loading, make the skill riskier than a normal documentation/helper skill.
Confidence: 89%Severity: 58%
Audit Metadata