lifecycleinventory-review
Warn
Audited by Socket on May 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill's review behavior and data flows are largely coherent with its stated TianGong audit purpose, and there is no sign of credential theft, proxy routing, or covert exfiltration. The main issue is install/execution trust: it relies on an unverified local `tiangong` binary whose official source and release chain could not be confirmed, which forces a high security-risk classification under the required scoring rules.
Confidence: 82%Severity: 72%
Audit Metadata