octopus-security-audit

Warn

Audited by Socket on May 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally aligned with a security-audit purpose, but it grants an AI agent offensive security and semi-autonomous remediation capabilities, inspects broad local/repo history data, and funnels work through an external orchestrator/model stack. This is not confirmed malware, but it is a high-risk security skill that should be tightly sandboxed and require explicit user approval for exploit, patch, and validation actions.

Confidence: 85%Severity: 78%
Audit Metadata
Analyzed At
May 9, 2026, 06:37 AM
Package URL
pkg:socket/skills-sh/nyldn%2Fclaude-octopus%2Foctopus-security-audit%2F@1d92439fce23071e62ed81c873fa1ec16cae3939