skills/lirrensi/agent-sommelier/bg-jobs/Socket

bg-jobs

Warn

Audited by Socket on Aug 12, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: purpose and capabilities are mostly aligned for a background-job manager, and no malicious data flow is evident. The main issue is install trust: it asks the agent to install and execute a CLI directly from a personal GitHub repository, which is a high supply-chain risk even though the repo appears to match the documented tool.

Confidence: 88%Severity: 72%

Audit Metadata

Analyzed At

Aug 12, 2026, 12:56 AM

Package URL

pkg:socket/skills-sh/lirrensi%2Fagent-sommelier%2Fbg-jobs%2F@a040b572a339d16c8d4db8a0ff205b494c65966c8216d80c326ea26fbda42dd3