herdr

Warn

Audited by Socket on Oct 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s core capability—local multi-agent orchestration in Herdr—is coherent with its purpose, and data flows stay mostly local to the Herdr workspace. The main risk is that it explicitly instructs launching subordinate agents with approval-bypass flags, creating high autonomy and safety-bypass risk; it also uses transitive skill installation. Not confirmed malware, but materially risky as an AI-agent control skill.

Confidence: 90%Severity: 76%
Audit Metadata
Analyzed At
Oct 19, 2026, 11:11 PM
Package URL
pkg:socket/skills-sh/davidondrej%2Fskills%2Fherdr%2F@ff2fb7350b4fe4f33b5005a2bf7695b4a0bbbaa2187271e5d4f83dfa761966ec