bot-process-control

Warn

Audited by Socket on May 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The core launchd/process-management behavior is coherent for a Gmail bot daemon skill, and data flows mostly stay local. However, the skill reaches into sensitive token/env/log files, instructs self-modification, and relies on local external binaries/scripts whose provenance is not verifiable from the skill, making the overall footprint riskier than a simple process-control helper.

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
May 9, 2026, 09:47 AM
Package URL
pkg:socket/skills-sh/terrylica%2Fcc-skills%2Fbot-process-control%2F@85cf0617d4af9de86a4213a1dc32856be999c5c1