skills/aeonfun/aeon/auto-workflow/Socket

auto-workflow

Warn

Audited by Socket on Aug 20, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is largely coherent with its stated workflow-builder purpose and uses official GitHub tooling, so supply-chain risk is low. However, analyze mode ingests arbitrary untrusted web content while the skill also has repo write/PR powers, creating meaningful indirect prompt-injection and autonomous action risk even with its stated safeguards.

Confidence: 89%Severity: 56%

Audit Metadata

Analyzed At

Aug 20, 2026, 05:29 PM

Package URL

pkg:socket/skills-sh/aeonfun%2Faeon%2Fauto-workflow%2F@452bfe99cea01e2c0c943c07e52f4d4237a5c897adcf222b0e06522d45dd34a8