delegate-task

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose broadly matches its capabilities and the documented tooling appears same-org/official, so this is not confirmed malware. However, it delegates expansive autonomous actions to an external runtime, supports cloud skill import/upload with transitive trust, and forwards credentials/task data to OpenSpace services, making the overall footprint moderately risky.

Confidence: 84%Severity: 61%
Audit Metadata
Analyzed At
Sep 18, 2026, 01:33 PM
Package URL
pkg:socket/skills-sh/hkuds%2Fopenspace%2Fdelegate-task%2F@4a37611d2c2b2c6517cdc5ca7af955e13147754b4d45b579e3037904cc58bf3b
Security Audit — socket — delegate-task