capability-assessment

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose is plausible, but its footprint is broader than necessary because it reads sensitive local chat history and routes the resulting personal analysis through a third-party Rube-managed integration to Slack. The stale/deprecated Rube dependency and unclear endpoint behavior weaken trust, though there is no direct evidence of malware or hidden payload execution.

Confidence: 87%Severity: 62%
Audit Metadata
Analyzed At
Sep 23, 2026, 05:00 PM
Package URL
pkg:socket/skills-sh/qodex-ai%2Fai-agent-skills%2Fcapability-assessment%2F@f8ecca17e868f668c1cba0e18da0722e743a2acb0d65c76de01f69846722267b
Security Audit — socket — capability-assessment