awesome-claude-code-subagents

Warn

Audited by Socket on May 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the repo and install paths appear to be legitimately associated with VoltAgent, so this is not confirmed malware. However, it is a transitive installer for 130+ remote subagents, uses unpinned raw GitHub downloads, includes direct script execution, and advertises offensive-security agents; that combination makes the skill medium-to-high risk despite coherent stated purpose.

Confidence: 87%Severity: 68%
Audit Metadata
Analyzed At
May 16, 2026, 09:49 PM
Package URL
pkg:socket/skills-sh/Aradotso%2Fclaude-code-skills%2Fawesome-claude-code-subagents%2F@9e5a5b80e4ee02f139c78ef693bdade70bfd8b52
Security Audit — socket — awesome-claude-code-subagents