stitch-loop
Warn
Audited by Socket on Jul 24, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s file access and website-building actions mostly match its stated purpose, but its broad MCP permissions, autonomous baton loop, optional transitive skill dependency, and only partially verified Stitch MCP provenance make it higher-risk than a normal documentation skill. No clear malware or credential theft behavior is shown.
Confidence: 80%Severity: 56%
Audit Metadata