subagent-driven-development
Warn
Audited by Socket on Aug 27, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's stated purpose matches its subagent orchestration behavior, but it materially expands the agent's operational footprint through transitive skill dependencies, autonomous code-modification workflow, and ingestion of broad local context. No direct credential theft, exfiltration endpoint, or malicious installer is present in this skill itself, so this is better classified as medium-risk workflow expansion rather than malware.
Confidence: 84%Severity: 56%
Audit Metadata