flux-opencode-scope
Warn
Audited by Socket on Jul 31, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated planning purpose is coherent, but the skill's real trust footprint is larger because core behavior is delegated to an unverifiable bundled fluxctl and multiple auxiliary scouts. No clear credential theft or malicious exfiltration is shown, but install/execution trust is high risk and disproportionate for a planning skill.
Confidence: 79%Severity: 74%
Audit Metadata