feature-planning
Warn
Audited by Socket on Sep 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The wrapper's stated purpose matches its local file reads and planning workflow, but its core value depends on delegating project context to an unverified third-party sub-skill. No direct malware or credential-harvesting behavior is present in this skill, yet the transitive trust and indirect supply-chain risk make it higher risk than a purely local documentation/workflow skill.
Confidence: 84%Severity: 52%
Audit Metadata