subagent

Warn

Audited by Socket on Jun 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s broad capabilities are largely consistent with its stated purpose as a subagent orchestrator, so it does not look malicious. However, it combines untrusted external-content ingestion with child agents that can run bash and write files, plus high-autonomy async/chain workflows and agent-management features, which makes it a medium-risk orchestration surface.

Confidence: 84%Severity: 61%
Audit Metadata
Analyzed At
Jun 22, 2026, 05:46 PM
Package URL
pkg:socket/skills-sh/flora131%2Fatomic%2Fsubagent%2F@23a87db87870c524eec7b86b18f5f6863086fb949753f67ab11a901ef40e5b04
Security Audit — socket — subagent