skills/alvarovillalbaa/plugins/multi-agent/Socket

multi-agent

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s stated orchestration purpose is plausible, but it delegates core behavior to unreviewed external skills via an unprovided installer script and registry files. The main risk is transitive skill installation and unverifiable supply chain, not confirmed malware in the visible text.

Confidence: 85%Severity: 76%

Audit Metadata

Analyzed At

Sep 19, 2026, 09:46 AM

Package URL

pkg:socket/skills-sh/alvarovillalbaa%2Fplugins%2Fmulti-agent%2F@4daae66c03450bd1b4153f105ab634a48eed2f65da63279dae56109b05305fe3