comet-tweak
Warn
Audited by Socket on Jun 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated purpose is coherent for a workflow preset, but trust is weakened by undocumented local script sourcing, execution of unverifiable Comet components, and mandatory loading of multiple downstream skills. No direct exfiltration or clear malware behavior is shown, but the transitive and autonomous execution footprint is larger than a simple preset guide.
Confidence: 100%Severity: 60%
Audit Metadata