agent-council

Warn

Audited by Socket on Aug 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s stated debate/orchestration purpose is coherent, but its recommended `pip install agent-council` path is not internally consistent with the claimed publisher. Because that third-party package would receive the required API key and handle all model traffic, the main risk is supply-chain compromise and credential forwarding rather than confirmed malware.

Confidence: 92%Severity: 78%
Audit Metadata
Analyzed At
Aug 26, 2026, 11:16 AM
Package URL
pkg:socket/skills-sh/magnus919%2Fagent-skills%2Fagent-council%2F@e76310498982d4173b2a0abbf71004e7c6d8cac3a1be32cd630315cb60839fba
Security Audit — socket — agent-council