Automation Lowcode Bundle
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the top-level bundle is mostly a directory of sub-skills, but it creates a transitive trust chain into many independently sourced automation skills. The main concerns are remote skill installation from non-vendor repos and at least one third-party intermediary data path; without the actual sub-skill contents, the bundle cannot be rated benign.
Confidence: 84%Severity: 72%
Audit Metadata