stelow-workflow-orchestrator

Warn

Audited by Socket on Sep 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the visible skill is broadly consistent with a workflow orchestrator, but it delegates to many unseen subskills/tools, includes shell-based state mutation, and instructs automatic execution/auto-advance. The main risk is transitive trust and expanded action scope rather than confirmed malware or direct credential theft.

Confidence: 85%Severity: 61%
Audit Metadata
Analyzed At
Sep 2, 2026, 09:06 PM
Package URL
pkg:socket/skills-sh/calionauta%2Fstelow%2Fstelow-workflow-orchestrator%2F@1758019f122612e3435c67558e5ddcd7d43e4416ca0c6f1a045dca60ac7fa096
Security Audit — socket — stelow-workflow-orchestrator