debt-payoff

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core debt-analysis purpose is coherent, and there is no installer, binary, or obvious credential-harvesting path. However, the skill exceeds a pure analysis role by probing ~/.claude/projects, silently appending telemetry outside the repo, operating autonomously without user questions, and encouraging execution of additional skills. Overall this is a medium-risk skill with the main concerns being transitive skill chaining and side-effecting local writes beyond the target project.

Confidence: 84%Severity: 53%
Audit Metadata
Analyzed At
Mar 23, 2026, 11:00 AM
Package URL
pkg:socket/skills-sh/tinh2%2Fskills-hub-registry%2Fdebt-payoff%2F@b70798f3cefcc59e43f651c0b6559c5cb92c071b
Security Audit — socket — debt-payoff