landing-report

Warn

Audited by Socket on Oct 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated landing-report purpose is a harmless read-only dashboard, but the actual skill footprint is much broader due to the shared gstack preamble: telemetry, artifact sync, local state writes, prompting, and even project mutations in some branches. Provenance appears same-publisher and official enough to avoid malware classification, but scope is not proportionate to the narrow purpose and execution trust is only medium because of mutable local helper binaries and eval/source behavior.

Confidence: 85%Severity: 52%
Audit Metadata
Analyzed At
Oct 26, 2026, 06:32 PM
Package URL
pkg:socket/skills-sh/thetalentcat%2Fclaude-skills%2Flanding-report%2F@ac2607d80e804cacff367c632e02c58bc11c7aa1