oracle-cheatsheet
Warn
Audited by Socket on Jul 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s core behavior matches its stated purpose, but it directly mines local Claude session logs and conversation history, then forwards derived content to a subagent and writes persistent summaries containing real session values. There is no malicious installer or credential-stealing endpoint, but the privacy and data-minimization posture is weaker than necessary for a formatting helper.
Confidence: 85%Severity: 52%
Audit Metadata