letta-fleet-management
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: overall functionality matches fleet management, and network flows to official Letta endpoints are coherent, but the skill’s trust boundary expands through a community-published `lettactl` package not clearly same-org with Letta and through optional third-party MCP credential forwarding to Firecrawl. No clear malware or hidden exfiltration is present, but install provenance and external credential routing make this medium risk.
Confidence: 85%Severity: 61%
Audit Metadata