agent-field-kit
Warn
Audited by Socket on Jul 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated bootstrap purpose partly matches tool-install and shell-setup behavior, but the skill also introduces remote-access operations, a plain-HTTP gateway registration flow to an unverifiable endpoint, and transitive loading of multiple other skills. With the key installer scripts absent, the true execution footprint cannot be verified; overall this is broader and riskier than a simple portable toolchain helper.
Confidence: 83%Severity: 78%
Audit Metadata