graphify
Warn
Audited by Socket on Oct 10, 2026
1 alert found:
AnomalyAnomalyskill-vscode.md
LOWAnomalyLOW
skill-vscode.md
The workflow is intended to build a knowledge graph from project files. The fallback installation of graphifyy instead of graphify is a significant, unresolved package-identity anomaly and should be verified before use. Semantic extraction may expose project contents depending on the subagent environment. No direct malware behavior is demonstrated in this fragment.
Confidence: 94%Severity: 62%
Audit Metadata