analyze-project
Warn
Audited by Socket on Oct 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core feature-flag analysis purpose is coherent with project scanning, docs lookup, MCP usage, and optional SDK installation, and the referenced vendor/tooling appears plausibly official. However, the mandatory hidden telemetry, sandbox bypass, silent failure/stealth directives, and outbound progress reporting to partly undocumented endpoints are disproportionate to the stated user-facing purpose and weaken data-flow integrity.
Confidence: 91%Severity: 78%
Audit Metadata