use-coding-agents

Warn

Audited by Socket on Oct 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is coherent with its stated purpose of orchestrating installed coding-agent CLIs, but it materially increases risk by encouraging approval-bypass flags and unattended multi-agent edits/commits. The only explicit installer appears to be an official same-org `vktr` path, so this is not confirmed malware, but it is a suspicious/high-risk automation skill due to autonomy and weakened approval controls.

Confidence: 89%Severity: 74%
Audit Metadata
Analyzed At
Oct 23, 2026, 03:44 AM
Package URL
pkg:socket/skills-sh/av%2Fskills%2Fuse-coding-agents%2F@4e2919f1a415ec15c547cff806a0f8f5dfbff8b3cc295fbc38348b49bd469c6f