pair-agent

Warn

Audited by Socket on May 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core browser-pairing behavior is coherent, but the skill carries a much larger gstack control surface than its stated purpose. Remote browser sharing and credential writing are expected for this use case, yet the unrelated telemetry, artifact-sync, CLAUDE.md mutation, git commits, and dependence on local helper binaries make the footprint disproportionate and high-trust.

Confidence: 85%Severity: 74%
Audit Metadata
Analyzed At
May 16, 2026, 12:53 PM
Package URL
pkg:socket/skills-sh/garrytan%2Fgstack%2Fpair-agent%2F@81fb983cdb5bb907a1b19801a304ffd559ca5dc6
Security Audit — socket — pair-agent