skills/nickmoignard/agent-afk-workflow/afk-workflow/Socket

afk-workflow

Warn

Audited by Socket on Sep 13, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is purpose-aligned as an autonomous delivery workflow, but it meaningfully increases risk by enabling AFK code publication and by recommending transitive third-party skill installation. The `bd` dependency appears same-org and legitimate, so the main concerns are autonomous repo actions and inherited trust from companion skills rather than confirmed malware.

Confidence: 90%Severity: 72%

Audit Metadata

Analyzed At

Sep 13, 2026, 10:23 PM

Package URL

pkg:socket/skills-sh/nickmoignard%2Fagent-afk-workflow%2Fafk-workflow%2F@6a347ffd60fd9e04f4683f8de005dda210baac8a2e2635eaa24c265e496b16b9