subagent-driven-development

Warn

Audited by Socket on Aug 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's stated purpose matches its subagent orchestration behavior, but it materially expands the agent's operational footprint through transitive skill dependencies, autonomous code-modification workflow, and ingestion of broad local context. No direct credential theft, exfiltration endpoint, or malicious installer is present in this skill itself, so this is better classified as medium-risk workflow expansion rather than malware.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Aug 27, 2026, 07:38 AM
Package URL
pkg:socket/skills-sh/galyarderlabs%2Fgalyarder-framework%2Fsubagent-driven-development%2F@b5ff8f19555b5ee2b4c5df8517a0fb4a0907a76660564ab793e9be44f827921c
Security Audit — socket — subagent-driven-development