driving-claude-code-sessions

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s capabilities mostly match its project-manager purpose, but it grants broad autonomous control over other coding agents running with prompt bypass, stages multiple harness credentials, and exposes detailed event/transcript data. No clear malicious exfiltration or deceptive installer is present, yet the scope and autonomy are high enough to warrant caution.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Sep 18, 2026, 05:51 AM
Package URL
pkg:socket/skills-sh/obra%2Fclaude-session-driver%2Fdriving-claude-code-sessions%2F@1a48a61aa7cbdc113f2199d401e1eed3c3584159773abb63a450b5012b3bee76
Security Audit — socket — driving-claude-code-sessions