agent-session-capture-backup

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly consistent with its stated backup/verification purpose, but it has a wide sensitive-data footprint, can modify shell environment files, and forwards transcript/run data to a private central service over plain HTTP. This looks more like an internal ops skill than overt malware, but it is high-trust and should only be used in the intended environment with careful review of the local joelclaw-runtime script and endpoint ownership.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Sep 23, 2026, 05:04 PM
Package URL
pkg:socket/skills-sh/joelhooks%2Fjoelclaw%2Fagent-session-capture-backup%2F@0d8fa57ffdd1bd26b60df8a1fee432a4a7bacea6f47ddb5fb6124c9b9e78af2a
Security Audit — socket — agent-session-capture-backup