autoresearch
Warn
Audited by Socket on Sep 27, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill is broadly aligned with prompt optimization, but its autonomous self-modifying loop is high-risk and disproportionate because it edits and repeatedly executes arbitrary target skills without per-run approval. Supply-chain risk is limited to an official Chart.js CDN include, but the main concern is autonomous action and amplification of whatever the target skill can do.
Confidence: 85%Severity: 72%
Audit Metadata