research-orchestrator

Warn

Audited by Socket on Jul 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose matches a research orchestration skill, but its footprint is very broad. The main risks are transitive trust in 21 dependent skills, untrusted web/content ingestion combined with file writes and script execution, and autonomous profile/state updates; these are coherent with the purpose but high enough to warrant caution.

Confidence: 81%Severity: 72%
Audit Metadata
Analyzed At
Jul 28, 2026, 12:51 PM
Package URL
pkg:socket/skills-sh/lensetek%2FResearch-Agent-Skills-Collection%2Fresearch-orchestrator%2F@29e69e4f8ed4de9ed23f0f6804a17f7b3bda821cf6549fc9cb3eaa85db031eb8
Security Audit — socket — research-orchestrator