flux-opencode-remember

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is coherent, but the skill's execution path relies on an unverifiable local binary and an unverified downstream skill. No direct exfiltration is shown, yet the transitive trust and black-box executable make the footprint riskier than a simple memory router should be.

Confidence: 86%Severity: 80%
Audit Metadata
Analyzed At
Jul 31, 2026, 05:22 AM
Package URL
pkg:socket/skills-sh/Nairon-AI%2Fflux-opencode%2Fflux-opencode-remember%2F@d18c673bf6430fda3585f5e9bf5e50db90e9ea6c2845dbe6069ab042860348b9