comet-tweak
Warn
Audited by Socket on Sep 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core Comet/OpenSpec workflow is internally consistent and uses apparently official tooling, but this skill mandates transitive loading of multiple other skills and allows substantial autonomous command execution, file changes, and commits. The main concern is trust expansion and automation scope, not confirmed malware or credential theft.
Confidence: 87%Severity: 61%
Audit Metadata