syncing-aidlc-workflows

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Anomaly
AnomalyLOW
lib/aidlc_import.sh

The script is an importer, but importing the kiro variant executes build logic from the selected upstream revision, which is a significant trust boundary. Cleanup and path safety also depend on helper implementations not provided here. No direct evidence of intentional malware appears in this fragment; use a trusted, pinned upstream commit and review the helper functions and upstream build script before execution.

Confidence: 95%Severity: 58%
Audit Metadata
Analyzed At
Sep 28, 2026, 12:00 AM
Package URL
pkg:socket/skills-sh/donngi%2Fagent-skills%2Fsyncing-aidlc-workflows%2F@5ace0fb619280f0860ba8ca38fd34c070f804cb52bd5eadcae0e7c36b29ee421