run-evals

Warn

Audited by Socket on Aug 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core purpose is coherent for an E2E testing skill, and use of the official Daytona CLI is plausible. However, the skill has elevated risk because it sources broad secret volumes into the test environment, depends on powerful repo-local shell scripts, can publish artifacts, and asks the agent to load another skill, creating transitive trust. This looks more like a high-risk testing/infrastructure skill than outright malicious behavior.

Confidence: 84%Severity: 69%
Audit Metadata
Analyzed At
Aug 14, 2026, 03:34 AM
Package URL
pkg:socket/skills-sh/devin-axis%2Fipollowork%2Frun-evals%2F@eef56883cc63549dcaac3d432068c2b50bed7fbae4016cacbe29e3a4581c4e33