nap
Warn
Audited by Socket on Oct 3, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose matches local cleanup/compaction, and there is no visible credential or network exfiltration behavior. However, the skill's real action is delegated to an unreviewable local dotfiles script outside a verifiable release path, and that script performs destructive filesystem operations. This is coherent with the purpose but carries high trust risk due to the unverifiable executable dependency.
Confidence: 86%Severity: 72%
Audit Metadata