skills/cristiano-pacheco/ai-tools/ai-implement-workplan/Socket

ai-implement-workplan

Warn

Audited by Socket on Sep 3, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The workflow purpose is coherent, but the skill relies on an unverifiable `wp` CLI and a transitive prerequisite skill with no documented provenance in the provided evidence. Its autonomous tracker writes and commit behavior fit the stated purpose, yet the unresolved trust chain keeps overall risk high.

Confidence: 78%Severity: 76%

Audit Metadata

Analyzed At

Sep 3, 2026, 11:14 PM

Package URL

pkg:socket/skills-sh/cristiano-pacheco%2Fai-tools%2Fai-implement-workplan%2F@dd1b5a92539c749339aa7a6bce22a70406af539e0ac7e6e4b5cb1b3379bb70e8