multi-harness-orchestrator

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose and capabilities broadly align, and the referenced harnesses appear to be official tools, but the footprint is still high-risk because it can automatically shell out to multiple external AI CLIs and forward broad local context (`.claude`, repo state, possibly `.grok` seeds) to third-party services. The main issue is disproportionate data exposure and autonomous delegation, not confirmed malware.

Confidence: 86%Severity: 68%
Audit Metadata
Analyzed At
Sep 4, 2026, 11:07 AM
Package URL
pkg:socket/skills-sh/frankxai%2Fclaude-skills-library%2Fmulti-harness-orchestrator%2F@f8a74c5f3bb58c9a835389d1592407dffd5c2a02e819882a7f361b55637ef274
Security Audit — socket — multi-harness-orchestrator