executing-plans
Warn
Audited by Socket on May 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core behavior matches the stated purpose of executing a saved development plan, but it also executes plan-derived `verifyCommand` content and depends on other skills, creating meaningful command-execution and transitive-trust risk. No direct credential harvesting, exfiltration endpoint, or malicious installer behavior is present in this skill text.
Confidence: 84%Severity: 58%
Audit Metadata