retro
Warn
Audited by Socket on Oct 26, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core retro functionality is plausible, but the skill’s actual footprint is much broader than needed: it executes many local helper binaries, evals their output, writes persistent analytics, may sync artifacts, and can edit/commit project routing files. Data flows stay mostly within the same gstack ecosystem, so this is not confirmed malware, but the capability scope is disproportionate for a retrospective skill.
Confidence: 87%Severity: 58%
Audit Metadata