opensource-pipeline

Pass

Audited by Socket on Sep 1, 2026

Checks
Malicious behaviorInjection, exfiltration, untrusted installs
Security concernsCredential exposure, tool/trust exploitation
Code obfuscationHidden or obfuscated code
Suspicious patternsReconnaissance, excessive autonomy, resource use
Audit Metadata
Analyzed At
Sep 1, 2026, 02:38 AM
Package URL
pkg:socket/skills-sh/defuj%2Fopencode-agent-kit%2Fopensource-pipeline%2F@eee26bfae2a01517e63d15797ac3c867abd0b6d17b9449e56fd43bfb250c0bf3
Security Audit — socket — opensource-pipeline