cekura-self-improving-agent

Warn

Audited by Socket on Oct 23, 2026

1 alert found:

Anomaly
AnomalyLOW
providers/self-hosted/overview.md

This fragment is workflow documentation for prompt editing and agent validation, not apparent malware. It describes several high-impact operations, especially executing a user-configured redeploy shell command and applying database or source edits. The documented transcript-to-auto-apply-to-shell path is a meaningful command-injection risk if caller-authored content is not isolated and authorization is not enforced. No direct malicious payload or data-exfiltration behavior is visible in this part.

Confidence: 93%Severity: 68%
Audit Metadata
Analyzed At
Oct 23, 2026, 04:05 AM
Package URL
pkg:socket/skills-sh/cekura-ai%2Fcekura-skills%2Fcekura-self-improving-agent%2F@d10e228499d7ff7c5b12b7099268dfc53da879ae5e9ad3061a355c6da5693113