tb-update-task-members

Warn

Audited by Socket on Apr 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated purpose and capabilities mostly align for a Teambition task-management skill, and user interaction constrains the remote action. However, the core action is delegated to an unverified local script with opaque auth/network behavior and no provenance details, which raises medium trust risk even without clear evidence of credential theft or exfiltration.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
Apr 12, 2026, 03:31 AM
Package URL
pkg:socket/skills-sh/KaelZhang321%2Fteambition-agent-toolkit%2Ftb-update-task-members%2F@6ccab30c5e74a14843a56ffe0236027a34d29d15