landing-report
Warn
Audited by Socket on Oct 26, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated landing-report purpose is a harmless read-only dashboard, but the actual skill footprint is much broader due to the shared gstack preamble: telemetry, artifact sync, local state writes, prompting, and even project mutations in some branches. Provenance appears same-publisher and official enough to avoid malware classification, but scope is not proportionate to the narrow purpose and execution trust is only medium because of mutable local helper binaries and eval/source behavior.
Confidence: 85%Severity: 52%
Audit Metadata