opencode-orchestrator-creator

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is mostly aligned with its stated local orchestration purpose and does not show credential theft or external exfiltration. Risk comes from enabling an autonomous curl-capable orchestrator that scans localhost, forwards untrusted multi-agent content, and references another skill, making it a medium-risk coordination skill rather than benign documentation.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Mar 28, 2026, 09:36 PM
Package URL
pkg:socket/skills-sh/IgorWarzocha%2Fopencode-agent-swarm-demo%2Fopencode-orchestrator-creator%2F@58d1572b0c77f69941a6f3965e439375495d5d30
Security Audit — socket — opencode-orchestrator-creator