build

Warn

Audited by Socket on Aug 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core purpose is coherent, but the skill has a moderately high operational footprint: autonomous subagents, shell execution, browser interaction with untrusted content, and GitHub push/PR actions. No direct exfiltration or malicious endpoint is shown, yet unresolved provenance for referenced skills and the high-privilege review/execution loop make it medium risk rather than benign.

Confidence: 81%Severity: 61%
Audit Metadata
Analyzed At
Aug 29, 2026, 11:04 PM
Package URL
pkg:socket/skills-sh/johngrimes%2Fmojoflow%2Fbuild%2F@3f467dd093a3bb81aecb94d3ea6bc9e92addb993d8d2c1c2c58136eac8cfc34a
Security Audit — socket — build