researcher-workflow

Warn

Audited by Socket on Aug 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s stated purpose matches its research behavior, but it forces all browsing through an external groktocrawl stack and processes untrusted web content recursively with artifact-writing and subagent delegation. This is not confirmed malware, but it is a medium-risk research workflow with notable tool-trust and prompt-injection exposure.

Confidence: 84%Severity: 57%
Audit Metadata
Analyzed At
Aug 28, 2026, 01:04 PM
Package URL
pkg:socket/skills-sh/magnus919%2Fhermes-profiles%2Fresearcher-workflow%2F@34090699eca6531387345d5216c9e52ec835cbc9840a3aa625c5a7c61e0381a6
Security Audit — socket — researcher-workflow