nap

Warn

Audited by Socket on Oct 3, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose matches local cleanup/compaction, and there is no visible credential or network exfiltration behavior. However, the skill's real action is delegated to an unreviewable local dotfiles script outside a verifiable release path, and that script performs destructive filesystem operations. This is coherent with the purpose but carries high trust risk due to the unverifiable executable dependency.

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
Oct 3, 2026, 08:44 PM
Package URL
pkg:socket/skills-sh/npow%2Fclaude-skills%2Fnap%2F@67ffce5107e081b2d1bf2c73138158dfbb6eef3af0cb0a3e144ec0bbde6c96b4