autonomous-run
Warn
Audited by Socket on Sep 27, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's purpose is coherent for developer workflow automation, and its explicit GitHub usage is first-party and proportionate. The main risk is that it enables unattended autonomous actions and composes additional unpinned skills by name, creating a transitive trust chain and allowing broader actions than a narrowly scoped helper should have.
Confidence: 90%Severity: 74%
Audit Metadata