stelow-product-orchestrator

Warn

Audited by Socket on Jul 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core purpose is coherent for a product-workflow orchestrator, but the skill expands trust through multiple subskills and an external third-party review tool, and it explicitly auto-advances into execution without asking the user. No clear credential theft or overt malware is present, but the autonomy and transitive trust footprint are disproportionate enough to warrant caution.

Confidence: 85%Severity: 68%
Audit Metadata
Analyzed At
Jul 18, 2026, 10:50 AM
Package URL
pkg:socket/skills-sh/calionauta%2Fagent-sync-public%2Fstelow-product-orchestrator%2F@b438527be64602c1006819618e4dcd897cef473b46c1c077fa815e61305ae287
Security Audit — socket — stelow-product-orchestrator