model-council

Warn

Audited by Socket on Sep 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s purpose broadly matches its capabilities, but trust is weakened by a wrong-publisher Gemini install instruction and by encouraging use of third-party tooling like aider with API keys. Data flows are mostly coherent for a multi-model aggregator, yet the expanded credential and prompt exposure surface makes this higher risk than a single-provider skill.

Confidence: 90%Severity: 72%
Audit Metadata
Analyzed At
Sep 26, 2026, 06:29 AM
Package URL
pkg:socket/skills-sh/michaelboeding%2Fskills%2Fmodel-council%2F@577d2175497eaac7949f320c8af2466d041fc2078a351bfd37514090c82dd196