goal

Warn

Audited by Socket on Aug 25, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Suspicious. The stated purpose matches the commands shown, but the skill's core dependency is an unverifiable local CLI and the skill enables persistent autonomous operation across idle turns. No direct credential harvesting or exfiltration is shown, but the opaque binary requirement alone makes this a high security-risk skill.

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
Aug 25, 2026, 02:56 PM
Package URL
pkg:socket/skills-sh/vm0-ai%2Fvm0-skills%2Fgoal%2F@e71571786bfc616a9639269736f075c09465bc5e41ec972188ef27fdab109aaf
Security Audit — socket — goal