dailybot

Warn

Audited by Socket on May 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s core purpose aligns with team communication, and the installer appears to be official same-org infrastructure, so it is not strong evidence of malware. However, it combines transitive skill installation, outbound communications, and autonomous email/report/status actions that exceed a low-risk helper profile, making it a medium/high-risk agent skill.

Confidence: 88%Severity: 68%
Audit Metadata
Analyzed At
May 6, 2026, 04:54 PM
Package URL
pkg:socket/skills-sh/DailybotHQ%2Fagent-skill%2Fdailybot%2F@2ef2461265bb886b2942dda2c4a645c6dd985700