submit-to-hackathon
Warn
Audited by Socket on Apr 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core submission-writing behavior is benign and aligned with the stated purpose, but the skill includes configurable remote telemetry that posts to a non-pinned endpoint from ~/.superstack/config.json. This is not confirmed malware and does not clearly harvest credentials, yet the off-skill network data flow and preexisting-config-based telemetry make it higher risk than a purely local writing skill.
Confidence: 88%Severity: 58%
Audit Metadata