idea-creator

Warn

Audited by Socket on May 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core purpose is legitimate research ideation, and the identified helpers appear same-project/official rather than covert malware. However, the footprint is broader than necessary for brainstorming: Bash(*) access, external LLM forwarding of local context, untrusted web-content processing with write/exec capability, and a stealth instruction to act 'silently' make the skill medium risk and not fully proportionate to its stated purpose.

Confidence: 84%Severity: 66%
Audit Metadata
Analyzed At
May 13, 2026, 01:08 PM
Package URL
pkg:socket/skills-sh/wanshuiyin%2Fauto-claude-code-research-in-sleep%2Fidea-creator%2F@53d431fd8de1ae689f13574967a9c462fd2d0a70