gds-agent-tech-writer

Warn

Audited by Socket on Sep 5, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated purpose is a technical writer, but the skill also executes project-local Python and config-driven activation steps, loads arbitrary project files into persistent context, and can dispatch other skills. There is no clear external credential theft or malicious endpoint, so this is not confirmed malware, but the execution scope is broader than necessary for a documentation persona and carries medium risk.

Confidence: 85%Severity: 66%
Audit Metadata
Analyzed At
Sep 5, 2026, 08:01 PM
Package URL
pkg:socket/skills-sh/bmad-code-org%2Fbmad-module-game-dev-studio%2Fgds-agent-tech-writer%2F@c639615822655db9cdc9dce1e9409800f6357964e5afbeaec8a825af64d1eb49
Security Audit — socket — gds-agent-tech-writer