creating-cloud-persona

Warn

Audited by Socket on Sep 4, 2026

2 alerts found:

Anomalyx2
AnomalyLOW
references/agents/cloud-team-implementer/persona.ts

No direct malicious or dangerous code is present in this configuration-only fragment. The main concern is elevated operational risk: it explicitly enables `dangerouslyBypassApprovalsAndSandbox`, and it delegates real behavior to an external handler (`./agent.ts`) and framework/harness integration that may perform GitHub actions. To assess actual malware/data-theft risk, the referenced handler and harness behavior must be reviewed; based on this snippet alone, the strongest signal is unsafe configuration that increases the impact of any downstream misuse.

Confidence: 58%Severity: 65%
AnomalyLOW
references/agents/cloud-team-implementer/persona.json

This fragment is purely configuration/manifest data and contains no explicit malicious behavior. However, it includes a high-risk governance setting (harnessSettings.dangerouslyBypassApprovalsAndSandbox: true) that could weaken sandbox/approval controls when executing the referenced ./agent.ts. Review ./agent.ts and the harness behavior honoring this flag to determine whether there is real malware, exfiltration, or destructive capability beyond this configuration.

Confidence: 56%Severity: 52%
Audit Metadata
Analyzed At
Sep 4, 2026, 09:01 AM
Package URL
pkg:socket/skills-sh/agentworkforce%2Fskills%2Fcreating-cloud-persona%2F@c7e09b0e567ad6aacc8658705b0f9b617731fb468a24625fe6b35a96331dbfc2
Security Audit — socket — creating-cloud-persona