defense-maintenance

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is mostly coherent as a local defense-maintenance analysis workflow and shows no external install or network exfiltration path, but it is overly autonomous, performs broad local discovery, silently writes telemetry outside the project, and suggests follow-on skill execution with unverified provenance. Risk is medium rather than high because actions are local and no credentials or remote endpoints are involved.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Mar 23, 2026, 11:01 AM
Package URL
pkg:socket/skills-sh/tinh2%2Fskills-hub-registry%2Fdefense-maintenance%2F@1eeeb6d686b396bd5cb10d616033deb7aec27c5f
Security Audit — socket — defense-maintenance