daily-debrief

Warn

Audited by Socket on Aug 7, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the journaling behavior itself is coherent, but the skill relies on an unverifiable companion skill (mission-log) and exposes an arbitrary command hook (JOURNAL_POST_CMD) that can forward generated reports anywhere. The main concern is transitive trust and uncontrolled post-processing/data flow, not confirmed malware.

Confidence: 86%Severity: 79%
Audit Metadata
Analyzed At
Aug 7, 2026, 08:34 AM
Package URL
pkg:socket/skills-sh/tingyulu%2FMyR2D2%2Fdaily-debrief%2F@80889119459c42dab4217540b234c0d493936564519f538500d34d9aacad4293
Security Audit — socket — daily-debrief