parallels-discord-roundtrip

Warn

Audited by Socket on Jun 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The skill is mostly aligned with its stated Parallels/Discord testing purpose, but its preferred workflow is more sensitive than necessary because it pulls a Discord token from a remote host credential file over SSH and injects it into the harness. No clear malicious or deceptive behavior is present, but the credential handling and multi-host execution make this a medium-risk, mildly suspicious skill rather than a fully benign one.

Confidence: 84%Severity: 53%
Audit Metadata
Analyzed At
Jun 23, 2026, 06:07 AM
Package URL
pkg:socket/skills-sh/storyclaw-official%2Fstoryclaw-assistant%2Fparallels-discord-roundtrip%2F@825cf4264d71f03f540183a99bc037cb31c6868bc194b4e524e8d479fcbde8f8
Security Audit — socket — parallels-discord-roundtrip