co-design
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's core behavior matches its stated orchestration purpose, and the `claude` CLI path appears to be official Anthropic tooling rather than an untrusted payload. However, it materially expands execution scope by spawning background Claude CLI processes with broad tool permissions, allowing autonomous code changes and commits in parallel, which creates meaningful repo-integrity and prompt-injection risk disproportionate to a simple task router.
Confidence: 88%Severity: 63%
Audit Metadata