backend-coding-agent

Warn

Audited by Socket on Apr 7, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated backend-engineering purpose is plausible, but the skill's mandatory transitive skill loading and use of high-autonomy external coding agents are disproportionate. Official CLI provenance lowers malware confidence, yet the trust chain and bypass/full-auto execution modes make this a high-risk orchestration skill rather than a simple backend guide.

Confidence: 88%Severity: 79%
Audit Metadata
Analyzed At
Apr 7, 2026, 01:02 PM
Package URL
pkg:socket/skills-sh/itsAR-VR%2Fgoatedskills%2Fbackend-coding-agent%2F@bfc528fc1d1f59c16564e4aa58c22627f8582d38