agent-repo-handoff-loop

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is broadly aligned with its stated purpose, but its footprint is large and highly autonomous. It can launch/resume agents, modify repos, push commits, read local agent state, and send outbound notifications with minimal human gating; install/provenance concerns are moderate rather than malicious, but the no-human-loop automation makes the overall skill high risk.

Confidence: 88%Severity: 76%
Audit Metadata
Analyzed At
Sep 12, 2026, 01:35 AM
Package URL
pkg:socket/skills-sh/jahfaliabdulrahman-dev%2Fhermes-skills%2Fagent-repo-handoff-loop%2F@92aff0692840e76de7e2caa135f7be73d421dea078f3b0cf1cac5ef66be92e9e
Security Audit — socket — agent-repo-handoff-loop