gds-agent-tech-writer
Warn
Audited by Socket on Sep 5, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated purpose is a technical writer, but the skill also executes project-local Python and config-driven activation steps, loads arbitrary project files into persistent context, and can dispatch other skills. There is no clear external credential theft or malicious endpoint, so this is not confirmed malware, but the execution scope is broader than necessary for a documentation persona and carries medium risk.
Confidence: 85%Severity: 66%
Audit Metadata