stelow-product-orchestrator
Warn
Audited by Socket on Jul 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core purpose is coherent for a product-workflow orchestrator, but the skill expands trust through multiple subskills and an external third-party review tool, and it explicitly auto-advances into execution without asking the user. No clear credential theft or overt malware is present, but the autonomy and transitive trust footprint are disproportionate enough to warrant caution.
Confidence: 85%Severity: 68%
Audit Metadata