score
Warn
Audited by Socket on Oct 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core behavior is coherent with prompt scoring, but the skill forwards user prompt content and an API key to a remote vendor hooks endpoint and permits destination override via CONTEXTSTELLAR_BASE_URL. No malware or exploit behavior is evident, but the external data flow and loose endpoint control make it medium risk for sensitive prompts.
Confidence: 91%Severity: 56%
Audit Metadata