skills/kdy1/kdy1-scripts/main-qa/Socket

main-qa

Warn

Audited by Socket on Oct 26, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's capabilities are largely coherent with advanced QA orchestration, and the T3 runtime provenance appears same-org and official. The main risk comes from broad autonomous multi-agent operation, local server execution, repo inspection, and especially transitive invocation of the separate `$add-issue` skill, which extends trust beyond this skill's own instructions.

Confidence: 87%Severity: 58%

Audit Metadata

Analyzed At

Oct 26, 2026, 04:09 AM

Package URL

pkg:socket/skills-sh/kdy1%2Fkdy1-scripts%2Fmain-qa%2F@2196fd0cb35659e27a72f53c98c0fe9bc185f4f2525ba99047653381e80a93ed