self-improving-agent

Warn

Audited by Socket on Apr 12, 2026

1 alert found:

Anomaly
AnomalyLOW
hooks/hooks.json

The configuration itself is small and not overtly malicious, but it instructs automatic execution of a package-supplied shell script (./hooks/error-capture.sh) which can perform any action available to the invoking user. This is a medium-to-high supply-chain risk until the referenced script is reviewed and its behavior validated. Treat the hook as potentially dangerous: do not allow it to run in sensitive environments without inspection or sandboxing.

Confidence: 75%Severity: 60%
Audit Metadata
Analyzed At
Apr 12, 2026, 08:18 AM
Package URL
pkg:socket/skills-sh/neekware%2Fehayeskills%2Fself-improving-agent%2F@01eee416c21d9dde7da35969609397875fe283ba
Security Audit — socket — self-improving-agent