mass-change

Warn

Audited by Socket on Aug 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's purpose and capabilities mostly align for large-scale refactoring, and its named tools are standard. The main risk is proportionality and autonomy: it can spawn many agents, run repo-defined commands, and publicly push changes/open PRs at scale, plus it depends on another skill via transitive trust.

Confidence: 87%Severity: 72%
Audit Metadata
Analyzed At
Aug 29, 2026, 05:22 AM
Package URL
pkg:socket/skills-sh/microsoft%2Famplifier-bundle-skills%2Fmass-change%2F@7b959d1e05f8d6b3e726276b155aed3060d1bb3e99b733f106b69303172878d1
Security Audit — socket — mass-change