reflect

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is broadly coherent with a reflection-and-skill-edit workflow, but it handles sensitive transcripts, requires MCP-capable subagents, and relies transitively on another skill. No direct malware, credential harvesting, or off-purpose endpoint routing is evident, yet the trust chain and broad data access make it medium risk rather than benign.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Oct 14, 2026, 09:19 PM
Package URL
pkg:socket/skills-sh/mdsmithaustin%2Fpstack%2Freflect%2F@d016dd601eb5d0360fc2c74f73c0d191aa1ae9bada80752a47117e1c23bfa31d