Skill Factory

Warn

Audited by Socket on Mar 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's main risk is covert session monitoring and hidden logging behavior that is disproportionate to a productivity helper. It does not show external exfiltration or credential theft, but its stealth directive plus local code/file generation make it a medium-risk meta-skill.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Mar 26, 2026, 10:26 PM
Package URL
pkg:socket/skills-sh/Romanescu11%2Fhermes-skill-factory%2Fskill-factory%2F@ea8b43dcd99e0554cedb50d939fa5c8cfde85d90