duel-agents-routing

Warn

Audited by Socket on Jun 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's capabilities mostly match its stated purpose, but it routes all model traffic through a third-party gateway, forwards credentials to that service, modifies multiple local config files, and uses mixed install paths including a GitHub plugin install. This looks like a coherent proxy/integration skill rather than confirmed malware, but the data-flow and trust footprint are meaningfully higher than a normal local SDK guide.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 16, 2026, 10:21 AM
Package URL
pkg:socket/skills-sh/Aradotso%2Fai-agent-skills%2Fduel-agents-routing%2F@041f26f4b927e5c4431aef6977aad8e3c622fda7845911f2e2bd6a905e3b51d8
Security Audit — socket — duel-agents-routing