buildkite

Warn

Audited by Socket on Oct 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s stated CI/CD capabilities are broadly consistent with its purpose and official Buildkite endpoints, but trust is weakened by the undisclosed local `buildkite` wrapper and its auto-running `scripts/setup`. No clear malicious data flow is shown, yet the hidden setup/install behavior and operational ability to trigger or cancel builds make this a medium-risk skill pending review of the wrapper and setup script.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Oct 6, 2026, 09:49 PM
Package URL
pkg:socket/skills-sh/hjewkes%2Fagent-skills%2Fbuildkite%2F@f6c0439e016d4f2ae03eeb7a1caa6d25274732d564c09a7ea4c5e1b1d2973c1f