deep-gather

Warn

Audited by Socket on Jun 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

BENIGN with notable operational risk. The capability matches the stated purpose of internet gathering, and the only concrete external CLI (`gh`) is official and proportionate. The main concern is high indirect prompt-injection exposure because the skill aggressively consumes untrusted web content while retaining write and some execution capability; its broad 'use all available tools' instruction also expands scope beyond a tightly bounded gatherer.

Confidence: 89%Severity: 61%
Audit Metadata
Analyzed At
Jun 29, 2026, 02:11 PM
Package URL
pkg:socket/skills-sh/samhvw8%2Fdotfiles%2Fdeep-gather%2F@017a624ffe85ee0e64a67d8c8cd99facefc0e032
Security Audit — socket — deep-gather