benchmark-loop

Warn

Audited by Socket on Sep 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's behavior matches its stated benchmark/orchestration purpose, but its footprint is high-risk: it autonomously spawns agents, disables approvals, executes rebuild/process-management commands, persists loop state, and chains into another skill. Data flow appears local and VibeHQ-consistent rather than obvious exfiltration, so this is not confirmed malware, but the unattended execution scope is disproportionate enough to classify as high security risk.

Confidence: 85%Severity: 74%
Audit Metadata
Analyzed At
Sep 13, 2026, 10:41 AM
Package URL
pkg:socket/skills-sh/0x0funky%2Fvibehq-hub%2Fbenchmark-loop%2F@3684e3dd2de36975387d9934447ada741a83503a5ee90ab91c5b01acc8c1d027