bat-submit
Warn
Audited by Socket on Aug 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s broad behavior mostly matches its stated purpose, but it combines unpinned third-party CLI installation, credential use through that CLI, and autonomous public submission without per-action confirmation. The main concern is trust and control delegation to bat-cli and unseen authentication/reference flows, not clear evidence of malware.
Confidence: 79%Severity: 72%
Audit Metadata