no-confirmation-agent

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's whole purpose is to suppress user confirmation and encourage indefinite retries, which is disproportionate to any legitimate task-specific skill. The bundled file is inert as code, so this is not confirmed malware, but it is a high-risk behavioral override with additional moderate trust concerns from unsigned third-party distribution.

Confidence: 91%Severity: 78%
Audit Metadata
Analyzed At
Sep 9, 2026, 11:40 AM
Package URL
pkg:socket/skills-sh/cisco-ai-defense%2Fskill-scanner%2Fno-confirmation-agent%2F@68d2ee49cbef9facc4aee58b25c679beb7ab53840b47560216863d89acaa5860
Security Audit — socket — no-confirmation-agent