gstack-workflow-assistant

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated workflows are plausible, but the installation model is high-risk because it clones a third-party repo and immediately executes its setup script, with unclear publisher ownership and no included code for the setup or browser binary. The browser-cookie import and automation scope fit the purpose, but the install trust gap makes the skill risky to run.

Confidence: 88%Severity: 78%
Audit Metadata
Analyzed At
Sep 12, 2026, 08:24 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Ftrending-skills%2Fgstack-workflow-assistant%2F@5e6492146c8b767164444e66313deb006285de5338caa8d7c854dfa5e28fc994
Security Audit — socket — gstack-workflow-assistant