anibon-timestamper

Warn

Audited by Socket on Oct 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core media-analysis pipeline is coherent and mostly uses expected tooling, but the skill's footprint extends into transitive skill loading, cross-skill file modification, and autonomous GitHub push/archive actions that exceed a narrowly scoped timestamper. No clear credential harvesting or attacker-controlled exfiltration is present, but external write actions and trust expansion raise meaningful risk.

Confidence: 83%Severity: 61%
Audit Metadata
Analyzed At
Oct 21, 2026, 02:41 AM
Package URL
pkg:socket/skills-sh/zenithth%2Fanibon-stream-synthesis%2Fanibon-timestamper%2F@a392c41b19d543580aaea8086d60f60f7c209097562b14bf6b943d8dac3ba6c3