use-coding-agents
Warn
Audited by Socket on Oct 23, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill is coherent with its stated purpose of orchestrating installed coding-agent CLIs, but it materially increases risk by encouraging approval-bypass flags and unattended multi-agent edits/commits. The only explicit installer appears to be an official same-org `vktr` path, so this is not confirmed malware, but it is a suspicious/high-risk automation skill due to autonomy and weakened approval controls.
Confidence: 89%Severity: 74%
Audit Metadata