flux-opencode-improve-agents-md

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core AGENTS.md restructuring behavior is coherent and local-only, but the skill also runs an unverified repo-relative binary (fluxctl) for session tracking. That binary is ancillary to the stated purpose and its provenance is not established, so overall risk is high from install/execution trust rather than confirmed malicious intent.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Jul 31, 2026, 05:22 AM
Package URL
pkg:socket/skills-sh/Nairon-AI%2Fflux-opencode%2Fflux-opencode-improve-agents-md%2F@37b5490f5ea7a6e70617f60d79334b22aac6de1b777f273fff0642768afe2ddd