task-handoff

Warn

Audited by Socket on Oct 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

BENIGN in purpose and data flow: this is a workflow/handoff skill that reads local repo state and writes one markdown handoff without exfiltration or credential handling. However, it relies on local ai-handoff/ai-coord tooling and optionally a local orchestration skill whose provenance was not publicly verified in the provided evidence, so overall security risk remains elevated from transitive trust and unverifiable local dependencies rather than from malicious behavior.

Confidence: 90%Severity: 70%
Audit Metadata
Analyzed At
Oct 13, 2026, 12:59 PM
Package URL
pkg:socket/skills-sh/paulrberg%2Fagent-skills%2Ftask-handoff%2F@3331293b837b45d1bc4113105055f1c48e74f6ad671e821ee09f62892d7acd15