skills/flonat/flonat-research/task-management/Socket

task-management

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The workflow is purpose-aligned and does not show credential theft, exfiltration, or hidden execution, but it relies on an external CLI whose provenance is not established in the skill or clearly verified by the provided evidence. Risk is driven mainly by install/execution trust around taskflow-cli, not by malicious behavior in the instructions themselves.

Confidence: 87%Severity: 72%

Audit Metadata

Analyzed At

Aug 24, 2026, 06:19 AM

Package URL

pkg:socket/skills-sh/flonat%2Fflonat-research%2Ftask-management%2F@11f832b27f03970963d45bea30b575ad7a36dac6d6ecd37db3240ab8bdc47a3e