skills/meharajm/agent-loop-mcp/agentic-loop/Socket

agentic-loop

Warn

Audited by Socket on Jul 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s capabilities mostly match its stated memory-server purpose, but it expands trust to a third-party MCP server fetched and executed via unpinned `npx`. Data flows are broadly proportionate to persistent-memory functionality, yet the server receives detailed task history and can influence future agent behavior, creating medium supply-chain and autonomy risk.

Confidence: 82%Severity: 56%

Audit Metadata

Analyzed At

Jul 18, 2026, 08:27 AM

Package URL

pkg:socket/skills-sh/meharajM%2Fagent-loop-mcp%2Fagentic-loop%2F@2c850db3c72f141e2b45bd0620fabd7f37ba6caed8bd96ac905dddccd597c33e