workflow-architect

Warn

Audited by Socket on Sep 2, 2026

1 alert found:

Anomaly
AnomalyLOW
skills/observer/SKILL.md

SUSPICIOUS. The core capability fits workflow inference, and there are no external installs, credentials, or third-party data sinks. However, the deliberate silent/invisible monitoring of session history and cross-session analysis, plus transitive local skill loading, make the skill riskier than a normal documentation/helper skill.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Sep 2, 2026, 05:57 PM
Package URL
pkg:socket/skills-sh/magnus919%2Fagent-skills%2Fworkflow-architect%2F@4649bc081061809aeb475e633c9da4e9ac9a5d4d5f437d2c98af40fce0020f25
Security Audit — socket — workflow-architect