team-coordinate

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s overall behavior is mostly coherent with a multi-agent coordination purpose, but its footprint is broad: dynamic role generation, background agent spawning, wildcard orchestration tools, and bash-capable workers create a medium-risk control plane. No clear malicious exfiltration or deceptive credential routing is present, and the referenced ccw CLI appears same-project and officially distributed, so this is not confirmed malware.

Confidence: 83%Severity: 62%
Audit Metadata
Analyzed At
Apr 22, 2026, 04:45 PM
Package URL
pkg:socket/skills-sh/catlog22%2Fclaude-code-workflow%2Fteam-coordinate%2F@1ea0929793a3b2763177c958a7accf215e9c05c6