skills/leandrocfe/skills/dev-pipeline/Socket

dev-pipeline

Warn

Audited by Socket on Aug 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill is mostly coherent with its stated dev-orchestration purpose, but it expands trust through transitive skill setup and optional autonomous external-agent dispatch. No clear malware or exfiltration is present, yet the orchestration footprint and chained tooling make it medium risk.

Confidence: 85%Severity: 57%

Audit Metadata

Analyzed At

Aug 10, 2026, 08:23 PM

Package URL

pkg:socket/skills-sh/leandrocfe%2Fskills%2Fdev-pipeline%2F@d0fb737ca90fa839b81507de52abdd585fa2633ef7a6888c3bbaec1d1e9db4b2