reflect
Warn
Audited by Socket on Oct 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is broadly coherent with a reflection-and-skill-edit workflow, but it handles sensitive transcripts, requires MCP-capable subagents, and relies transitively on another skill. No direct malware, credential harvesting, or off-purpose endpoint routing is evident, yet the trust chain and broad data access make it medium risk rather than benign.
Confidence: 84%Severity: 56%
Audit Metadata