herdr
Warn
Audited by Socket on Oct 19, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s core capability—local multi-agent orchestration in Herdr—is coherent with its purpose, and data flows stay mostly local to the Herdr workspace. The main risk is that it explicitly instructs launching subordinate agents with approval-bypass flags, creating high autonomy and safety-bypass risk; it also uses transitive skill installation. Not confirmed malware, but materially risky as an AI-agent control skill.
Confidence: 90%Severity: 76%
Audit Metadata