dream

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s core memory-capture behavior is coherent and mostly local, with no obvious credential theft or external exfiltration. Risk comes from broad transcript mining, persistent local writes, and opt-in installation of hooks/cron that enable ongoing autonomous operation; this is proportionate enough to avoid a malicious label, but more invasive than a simple memory helper.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
Jul 15, 2026, 01:50 PM
Package URL
pkg:socket/skills-sh/maxvaega%2Fawesome-skills%2Fdream%2F@07e577c2fbb1cc831aa81c0a15a20460cad635ecb330ee44db506c20bb228a9f
Security Audit — socket — dream