source-command-compound-extended
Warn
Audited by Socket on May 12, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the visible skill is a thin wrapper around a local Bash script with unclear data boundaries. There is no direct evidence of malware or credential theft in the provided text, but the opaque bridge script and broad workspace fallback make the actual footprint insufficiently transparent for a benign classification.
Confidence: 100%Severity: 60%
Audit Metadata