adapt
Warn
Audited by Socket on Sep 2, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core behavior is coherent for a workflow-adaptation skill, and there is no clear credential theft or exfiltration path. However, it requires transitive installation of another framework from a third-party GitHub repo via git clone and local setup, which creates meaningful supply-chain and trust-expansion risk that is higher than a normal documentation-only skill.
Confidence: 86%Severity: 64%
Audit Metadata