devin

Warn

Audited by Socket on Jul 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

BENIGN for publisher/purpose alignment: it is a genuine Devin integration using official install and official API surfaces. Security risk is still medium-high because it grants an autonomous coding agent dangerous local permissions and broad cloud control, so it should be treated as a powerful agent wrapper rather than a narrow helper.

Confidence: 87%Severity: 68%
Audit Metadata
Analyzed At
Jul 14, 2026, 11:31 PM
Package URL
pkg:socket/skills-sh/iii-hq%2Fworkers%2Fdevin%2F@ad8d5d936496b55a3ab2d64642d2746dfd17d7df4057e3fa36b708c23b749ec4
Security Audit — socket — devin