breathe-cli-resonance-breathing

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's behavior fits its wellness-tool purpose and does not request disproportionate credentials or exfiltrate data, but install trust is weaker than expected because ara.so publishes the skill while all execution paths point to unrelated third-party artifacts, including a raw GitHub download-and-run path. This looks more like a risky wrapper around someone else's CLI than a malicious credential-harvesting skill.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Oct 8, 2026, 11:45 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdevtools-skills%2Fbreathe-cli-resonance-breathing%2F@6064906913698556eadad13b911ba70f22dccd518f4d3f3a819ae2836e2aca02