letta-fleet-management

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: overall functionality matches fleet management, and network flows to official Letta endpoints are coherent, but the skill’s trust boundary expands through a community-published `lettactl` package not clearly same-org with Letta and through optional third-party MCP credential forwarding to Firecrawl. No clear malware or hidden exfiltration is present, but install provenance and external credential routing make this medium risk.

Confidence: 85%Severity: 61%
Audit Metadata
Analyzed At
Sep 14, 2026, 07:46 PM
Package URL
pkg:socket/skills-sh/letta-ai%2Fskills%2Fletta-fleet-management%2F@ba4642c3944456b7635764d8d20f3ab9b4bf118ee787fe33a3e75dec289b14b3
Security Audit — socket — letta-fleet-management