anibon-timestamper
Warn
Audited by Socket on Oct 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core media-analysis pipeline is coherent and mostly uses expected tooling, but the skill's footprint extends into transitive skill loading, cross-skill file modification, and autonomous GitHub push/archive actions that exceed a narrowly scoped timestamper. No clear credential harvesting or attacker-controlled exfiltration is present, but external write actions and trust expansion raise meaningful risk.
Confidence: 83%Severity: 61%
Audit Metadata