osmedeus-expert

Warn

Audited by Socket on Sep 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Purpose and capabilities are internally consistent for an Osmedeus guide, but the skill is inherently high-risk because it equips an AI agent with offensive security automation, remote execution, cloud provisioning, and file/network movement. The main concern is not deception; it is that official Osmedeus workflows and install paths can fetch and run external tools, including third-party binaries, creating substantial supply-chain and real-world action risk.

Confidence: 88%Severity: 82%
Audit Metadata
Analyzed At
Sep 24, 2026, 09:06 AM
Package URL
pkg:socket/skills-sh/osmedeus%2Fosmedeus-skills%2Fosmedeus-expert%2F@c4035d481905738bf1be908d381d89c083c035273659876023feae1da88ee0c3