pair-agent
Warn
Audited by Socket on May 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core browser-pairing behavior is coherent, but the skill carries a much larger gstack control surface than its stated purpose. Remote browser sharing and credential writing are expected for this use case, yet the unrelated telemetry, artifact-sync, CLAUDE.md mutation, git commits, and dependence on local helper binaries make the footprint disproportionate and high-trust.
Confidence: 85%Severity: 74%
Audit Metadata