skills/leverage-computer/skills/agent-governance/Socket

agent-governance

Warn

Audited by Socket on Nov 9, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

The governance purpose is coherent with the described Leverage workspace settings, and no direct exfiltration behavior is shown. However, the required CLI's provenance is unspecified and onboarding is delegated to an installable skill, so supply-chain and transitive-trust risk warrant caution.

Confidence: 86%Severity: 70%

Audit Metadata

Analyzed At

Nov 9, 2026, 06:42 AM

Package URL

pkg:socket/skills-sh/leverage-computer%2Fskills%2Fagent-governance%2F@acefebe3d28255f863edd666a2d2dd41a2d27d048ac3df7c75f47abc176bcb8f