comet-tweak

Warn

Audited by Socket on Jun 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent for a workflow preset, but trust is weakened by undocumented local script sourcing, execution of unverifiable Comet components, and mandatory loading of multiple downstream skills. No direct exfiltration or clear malware behavior is shown, but the transitive and autonomous execution footprint is larger than a simple preset guide.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 14, 2026, 08:04 AM
Package URL
pkg:socket/skills-sh/rpamis%2Fcomet%2Fcomet-tweak%2F@fbacd18445bd8836d052e07ed5d48244e70f0bd378875b1b9571ce4b0dea3f00
Security Audit — socket — comet-tweak