role-repo-manager

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's stated purpose is coherent, but it relies completely on an external CLI whose ecosystem includes transitive skill installation and a Vercel-hosted role hub/analytics path. No direct malicious behavior is shown in this skill text, yet the delegated trust and external routing make it higher-risk than a simple local repo-management helper.

Confidence: 84%Severity: 59%
Audit Metadata
Analyzed At
Sep 18, 2026, 02:35 PM
Package URL
pkg:socket/skills-sh/jsonlee12138%2Fagent-team%2Frole-repo-manager%2F@303010ccac6f1f0c088fe53094db8734041b7e85f8c1a9896d76045bd094b6dd