backend-coding-agent
Warn
Audited by Socket on Apr 7, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated backend-engineering purpose is plausible, but the skill's mandatory transitive skill loading and use of high-autonomy external coding agents are disproportionate. Official CLI provenance lowers malware confidence, yet the trust chain and bypass/full-auto execution modes make this a high-risk orchestration skill rather than a simple backend guide.
Confidence: 88%Severity: 79%
Audit Metadata