multi-agent

Warn

Audited by Socket on Jul 5, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The stated purpose matches multi-agent orchestration, but the skill’s main risky behavior is instructing transitive installation of external skills through an unseen local installer and registry. No direct credential theft, exfiltration, or malicious commands are present in the provided text, but install trust is incomplete and the inherited-permission chain is broader than ideal.

Confidence: 85%Severity: 56%
Audit Metadata
Analyzed At
Jul 5, 2026, 04:25 PM
Package URL
pkg:socket/skills-sh/alvarovillalbaa%2Fplugins%2Fmulti-agent%2F@ca890cf200b7438bb191ae8c61fed61603ee029573df4af50f5db85d0373998d
Security Audit — socket — multi-agent