to-spec
Warn
Audited by Socket on Oct 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core behavior is coherent for a spec-writing workflow, but the skill includes transitive skill execution and autonomous publication to an external issue tracker. Risk comes from trust chaining and external posting, not from clear malware or credential theft.
Confidence: 86%Severity: 61%
Audit Metadata