co-design

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's core behavior matches its stated orchestration purpose, and the `claude` CLI path appears to be official Anthropic tooling rather than an untrusted payload. However, it materially expands execution scope by spawning background Claude CLI processes with broad tool permissions, allowing autonomous code changes and commits in parallel, which creates meaningful repo-integrity and prompt-injection risk disproportionate to a simple task router.

Confidence: 88%Severity: 63%
Audit Metadata
Analyzed At
Sep 14, 2026, 05:59 PM
Package URL
pkg:socket/skills-sh/am-will%2Fswarms%2Fco-design%2F@863d0889fa8b0c0935445f8ebbc652276865f705310b6377e49a7d6fc0f00bb7