subagent
Warn
Audited by Socket on Jun 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s broad capabilities are largely consistent with its stated purpose as a subagent orchestrator, so it does not look malicious. However, it combines untrusted external-content ingestion with child agents that can run bash and write files, plus high-autonomy async/chain workflows and agent-management features, which makes it a medium-risk orchestration surface.
Confidence: 84%Severity: 61%
Audit Metadata