agent-eval

Warn

Audited by Socket on Sep 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose mostly matches its capabilities, but it combines arbitrary command execution, external agent prompting, and a lightly verified personal-repo install source. This looks like a plausible benchmarking skill with moderate security risk rather than clear malware.

Confidence: 82%Severity: 57%
Audit Metadata
Analyzed At
Sep 1, 2026, 02:38 AM
Package URL
pkg:socket/skills-sh/defuj%2Fopencode-agent-kit%2Fagent-eval%2F@0e2cafcc074a612db26ac4d370047bde2147d300416943dacf3a799581247489
Security Audit — socket — agent-eval