apply-turbo-handoffs
Warn
Audited by Socket on Oct 3, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core repo-audit/edit purpose is coherent, but the skill delegates to other skills and can make remote changes by committing, pushing, and updating installed skills. The main risk is transitive trust and real-world action scope, not clear credential theft or hidden exfiltration.
Confidence: 79%Severity: 58%
Audit Metadata