build-with-claude
Warn
Audited by Socket on Aug 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core build workflow is coherent for a Solana development skill, but bundled telemetry introduces a non-essential data flow to a user-configurable remote Convex endpoint. No evidence of credential theft, exploit code, or malicious installers, yet the remote reporting and indirect reliance on other skills/MCPs make the skill moderately risky.
Confidence: 84%Severity: 56%
Audit Metadata