autonomous-run

Warn

Audited by Socket on Sep 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's purpose is coherent for developer workflow automation, and its explicit GitHub usage is first-party and proportionate. The main risk is that it enables unattended autonomous actions and composes additional unpinned skills by name, creating a transitive trust chain and allowing broader actions than a narrowly scoped helper should have.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Sep 27, 2026, 05:04 PM
Package URL
pkg:socket/skills-sh/anis-dr%2Fskills%2Fautonomous-run%2F@217123ced01053c37f93f95dda8088a19526ed2cbb9daf1946897f2d6a4ed366