create-plan-by

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core planning purpose is plausible, but the skill expands into high-trust autonomous CLI execution, ambiguous alias-based command resolution, and optional off-host upload via another skill. The dangerous execution flags and unclear provenance of `agent` make the footprint broader and riskier than a normal planning skill.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Aug 6, 2026, 04:47 PM
Package URL
pkg:socket/skills-sh/gitbobobo%2Fskills%2Fcreate-plan-by%2F@cc7adb77b82d1e3c5fab81b8019964aa9d2f35a27ae1e3e5ee0e0d04e5bb494d
Security Audit — socket — create-plan-by