task-router
Warn
Audited by Socket on Mar 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's core purpose as a router is plausible, but its hidden always-on operation and delegation to unspecified downstream skills create disproportionate trust and visibility concerns. No direct credential theft, external exfiltration, or malicious installer behavior appears in this artifact, but the stealth and transitive-control patterns make it risky.
Confidence: 89%Severity: 61%
Audit Metadata