to-spec
Warn
Audited by Socket on Aug 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core behavior is coherent for a spec-publishing skill, and install evidence suggests same-publisher tooling. Risk comes from transitive skill setup, external issue-tracker writes, and internal skill routing without explicit per-action safeguards, so it is not benign but also not malicious.
Confidence: 82%Severity: 56%
Audit Metadata