skills/microsoft/amplifier-bundle-skills/councilify/Socket

councilify

Warn

Audited by Socket on Sep 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose is coherent, and I found no credential theft, covert exfiltration, or malicious pre-execution behavior. The main risk is transitive trust: it composes and delegates to other skills/agents with code-writing and git-publishing capability inside an early-preview ecosystem sourced from mutable same-org GitHub content.

Confidence: 89%Severity: 58%

Audit Metadata

Analyzed At

Sep 5, 2026, 04:29 AM

Package URL

pkg:socket/skills-sh/microsoft%2Famplifier-bundle-skills%2Fcouncilify%2F@c0f83189d01e233dcc4af32e234b36126414673287fff4ce08ede2df0306d68c