rota-orchestrate

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s capabilities mostly match its orchestration purpose, and the only verified external tool (`herdr`) is official. However, the workflow has broad autonomous merge/posting powers, and the core `rota` dependency could not be independently verified from the provided evidence, so install trust is incomplete rather than clearly benign.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Oct 8, 2026, 10:22 PM
Package URL
pkg:socket/skills-sh/l4ci%2Frota%2Frota-orchestrate%2F@8aae0603149f2aaeed763ddff18342f77ac8a1ae3e8baae62996c1a54fba8d3b