autoresearch

Warn

Audited by Socket on Sep 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is broadly aligned with prompt optimization, but its autonomous self-modifying loop is high-risk and disproportionate because it edits and repeatedly executes arbitrary target skills without per-run approval. Supply-chain risk is limited to an official Chart.js CDN include, but the main concern is autonomous action and amplification of whatever the target skill can do.

Confidence: 85%Severity: 72%
Audit Metadata
Analyzed At
Sep 27, 2026, 02:30 PM
Package URL
pkg:socket/skills-sh/marcioaltoe%2Fskills%2Fautoresearch%2F@6ec14e593f4a1a594e1e39358dd98e1d00ffa6529f0300cf509b9ad7c6dfdc6a