research
Warn
Audited by Socket on Jun 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's purpose is coherent, and the Gemini CLI dependency appears official and verifiable, so this is not malware. Risk comes from delegated autonomy, `--yolo` execution, and forwarding full conversation context to an external CLI/service for processing.
Confidence: 100%Severity: 60%
Audit Metadata