autonomous-agent-harness
Warn
Audited by Socket on Jul 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s purpose is plausible, but its core install path relies on unverified, unpinned MCP packages and it grants broad autonomous capabilities with ongoing external actions. The adapted Claude/ECC-to-Gemini framing and unverified Gemini dispatch/cron claims make the footprint inconsistent enough to treat as high security risk rather than benign documentation.
Confidence: 85%Severity: 84%
Audit Metadata