tech-decision
Warn
Audited by Socket on Oct 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core purpose is benign and the described research/reporting workflow is coherent, but the skill expands trust by directing the agent to invoke other loosely identified skills and optional external MCP tooling. Main concerns are transitive trust and ambiguous provenance, not confirmed malicious behavior or credential theft.
Confidence: 86%Severity: 58%
Audit Metadata