autonomous-loops

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The documentation mostly matches its stated purpose and uses official tools like Claude Code and GitHub CLI, but it also steers users toward an autonomous PR/merge workflow and a third-party personal-repo tool (continuous-claude) whose official install path relies on raw script execution. The main concern is supply-chain and credential-forwarding risk from that external wrapper plus elevated autonomy, not confirmed malware.

Confidence: 91%Severity: 76%
Audit Metadata
Analyzed At
Sep 14, 2026, 07:59 PM
Package URL
pkg:socket/skills-sh/affaan-m%2Fecc%2Fautonomous-loops%2F@6883f7df6429411a38a9f44f15d7823123b63f4f5528e122660a1bc6a19a1c52