deep-gather
Warn
Audited by Socket on Jun 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
BENIGN with notable operational risk. The capability matches the stated purpose of internet gathering, and the only concrete external CLI (`gh`) is official and proportionate. The main concern is high indirect prompt-injection exposure because the skill aggressively consumes untrusted web content while retaining write and some execution capability; its broad 'use all available tools' instruction also expands scope beyond a tightly bounded gatherer.
Confidence: 89%Severity: 61%
Audit Metadata