goal

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Suspicious. The stated purpose matches the commands shown, but the skill's core dependency is an unverifiable local CLI and the skill enables persistent autonomous operation across idle turns. No direct credential harvesting or exfiltration is shown, but the opaque binary requirement alone makes this a high security-risk skill.

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
Aug 17, 2026, 09:36 PM
Package URL
pkg:socket/skills-sh/vm0-ai%2Fvm0-skills%2Fgoal%2F@52af15847c8ea3a199a4160da0228ab02618f924547208586e872a8c33c3de0d
Security Audit — socket — goal