skills/devarfeen/agent-skills-kit/orchestrate-herdr/Socket

orchestrate-herdr

Warn

Audited by Socket on Jul 24, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose matches multi-agent GitHub orchestration, but the footprint is moderately risky because it autonomously launches a user-specified coding CLI across tabs, consumes untrusted GitHub issue content, and performs GitHub mutations. Data flows are mostly coherent and official, so this is not confirmed malicious, but the unconstrained CODING_CLI and companion-skill dependency make it a medium-risk orchestration skill.

Confidence: 81%Severity: 61%

Audit Metadata

Analyzed At

Jul 24, 2026, 05:29 AM

Package URL

pkg:socket/skills-sh/devarfeen%2Fagent-skills-kit%2Forchestrate-herdr%2F@59e05b1c1dc6ef8efb1627db8987dc4e83a417f533d2e69c39c3b2ceed61bcab