alpha-feature
Warn
Audited by Socket on Jun 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated purpose matches a skill-development pipeline, but the footprint includes autonomous commit/push/install actions and execution of opaque repo-defined Bun scripts. This is not confirmed malicious, yet it carries medium risk because it can publish code and run local project commands with limited verification.
Confidence: 87%Severity: 63%
Audit Metadata