autonomous-supply-chain
Warn
Audited by Socket on Apr 19, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose is coherent for logistics automation, but the skill is high risk because it authorizes autonomous real-world purchasing and vendor actions without human oversight or defined approval gates. No concrete installer or credential-harvesting behavior is shown, so this is not confirmed malware, but the operational scope is disproportionate and the external data flows are too unspecified to trust.
Confidence: 87%Severity: 78%
Audit Metadata