coding-agent

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. Most workflows align with a coding-agent skill, and the named major tools are largely consistent with official distribution. However, the skill normalizes approval-bypass modes, enables autonomous GitHub posting/pushing, and includes a third-party Pi agent install that may receive prompts and API keys without strong provenance evidence. The footprint is broader and riskier than a simple background-runner guide.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Oct 8, 2026, 08:32 PM
Package URL
pkg:socket/skills-sh/kirkluokun%2Fawesome-a-stock-openclawskills%2Fcoding-agent%2F@8e940a4e9757c7049cc05a7b95a90876251d2d72bb09230653da869b24606d53