retro

Warn

Audited by Socket on Oct 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core retro functionality is plausible, but the skill’s actual footprint is much broader than needed: it executes many local helper binaries, evals their output, writes persistent analytics, may sync artifacts, and can edit/commit project routing files. Data flows stay mostly within the same gstack ecosystem, so this is not confirmed malware, but the capability scope is disproportionate for a retrospective skill.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Oct 26, 2026, 06:33 PM
Package URL
pkg:socket/skills-sh/thetalentcat%2Fclaude-skills%2Fretro%2F@88196ba2f27530ea9775c5e04a59a2228a994f26