complain
Warn
Audited by Socket on Oct 6, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s stated purpose matches its behavior, but the core behavior is an undisclosed autonomous submission on the user’s behalf. Data flow appears limited to an internal Paperclip channel using existing credentials, with no evidence here of external exfiltration, but the silent side effect and unverifiable helper/tool details make this a high security-risk skill rather than malware.
Confidence: 90%Severity: 76%
Audit Metadata