quest-iterate
Warn
Audited by Socket on Oct 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
This skill is not confirmed malicious, but it is security-significant because it outsources its core behavior to an external, insufficiently described CLI and linked setup process. The purpose is plausible, yet the install trust, action scope, and data flows are too opaque to treat as benign; overall this is best classified as suspicious/high-risk rather than malware.
Confidence: 75%Severity: 76%
Audit Metadata