comet-tweak

Warn

Audited by Socket on Sep 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core Comet/OpenSpec workflow is internally consistent and uses apparently official tooling, but this skill mandates transitive loading of multiple other skills and allows substantial autonomous command execution, file changes, and commits. The main concern is trust expansion and automation scope, not confirmed malware or credential theft.

Confidence: 87%Severity: 61%
Audit Metadata
Analyzed At
Sep 1, 2026, 02:03 AM
Package URL
pkg:socket/skills-sh/rpamis%2Fcomet%2Fcomet-tweak%2F@33eacdd5dd5a36dc023daf3307674b5d1c50fbb6df942ed9da2b5fd32e45e5ed
Security Audit — socket — comet-tweak