debt-payoff
Warn
Audited by Socket on Mar 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core debt-analysis purpose is coherent, and there is no installer, binary, or obvious credential-harvesting path. However, the skill exceeds a pure analysis role by probing ~/.claude/projects, silently appending telemetry outside the repo, operating autonomously without user questions, and encouraging execution of additional skills. Overall this is a medium-risk skill with the main concerns being transitive skill chaining and side-effecting local writes beyond the target project.
Confidence: 84%Severity: 53%
Audit Metadata