to-spec

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core behavior is coherent for a spec-writing workflow, but the skill includes transitive skill execution and autonomous publication to an external issue tracker. Risk comes from trust chaining and external posting, not from clear malware or credential theft.

Confidence: 86%Severity: 61%
Audit Metadata
Analyzed At
Oct 16, 2026, 10:45 AM
Package URL
pkg:socket/skills-sh/peachest%2Fskills%2Fto-spec%2F@9a203261dfeadf380077943283100a2dec16ecba4a016c206120983d47b0dc58