33god-33god-agent-factory

Warn

Audited by Socket on May 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s overall purpose matches agent provisioning, and the BMAD install path is a real npm-documented command rather than a fake download-execute lure. However, it expands trust substantially by auto-linking other skills, modifies shared gateway config, stores Telegram tokens, and provisions inherited provider access for spawned agents; those capabilities are powerful and only partially verifiable from this snippet.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
May 18, 2026, 09:18 AM
Package URL
pkg:socket/skills-sh/delorenj%2Fskills%2F33god-33god-agent-factory%2F@c7b89681059934c1b1639c26fe416d9abc8d9060
Security Audit — socket — 33god-33god-agent-factory