autoresearch

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is purpose-aligned and not overtly malicious, but it grants an agent broad autonomous control to repeatedly run experiments and overwrite another skill's SKILL.md without further approval. External dependency risk is low and official, yet the autonomy and in-place mutation behavior make the overall security posture high-risk for an AI agent workflow.

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
Sep 16, 2026, 11:04 AM
Package URL
pkg:socket/skills-sh/pedronauck%2Fskills%2Fautoresearch%2F@f722155e5c559e7ffd1726325dd6838ca3d5d248e377fcd9bf1dbcf0019ae8b0