semantius-analyst
Warn
Audited by Socket on Jun 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s capabilities mostly match its stated Semantius reconciliation purpose, and its no-delete guardrails are proportionate. The main concern is install/execution trust: it relies on a `semantius` CLI whose official provenance is not clearly verifiable from the provided material, plus external toolchain installs and authenticated live-catalog access through that CLI. This is not confirmed malware, but it carries medium risk until the Semantius CLI source, ownership, and official install path are verified.
Confidence: 79%Severity: 58%
Audit Metadata