flux-opencode-improve-agents-md
Warn
Audited by Socket on Jul 31, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core AGENTS.md restructuring behavior is coherent and local-only, but the skill also runs an unverified repo-relative binary (fluxctl) for session tracking. That binary is ancillary to the stated purpose and its provenance is not established, so overall risk is high from install/execution trust rather than confirmed malicious intent.
Confidence: 84%Severity: 72%
Audit Metadata