agent-session-capture-backup

Warn

Audited by Socket on Aug 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly consistent with its stated backup/verification purpose, but it has a wide sensitive-data footprint, can modify shell environment files, and forwards transcript/run data to a private central service over plain HTTP. This looks more like an internal ops skill than overt malware, but it is high-trust and should only be used in the intended environment with careful review of the local joelclaw-runtime script and endpoint ownership.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Aug 9, 2026, 05:05 PM
Package URL
pkg:socket/skills-sh/joelhooks%2Fjoelclaw%2Fagent-session-capture-backup%2F@5d9fdc0aaab6b7feda4e8a09b48db009a78c39bc001be4b1ac421356993e44a5
Security Audit — socket — agent-session-capture-backup