litellm-agent-platform

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core platform purpose is coherent with local API, Docker isolation, sessions, and agent tooling, and the install path looks like normal same-ecosystem source setup rather than malware. However, the skill explicitly supports forwarding credentials to user-specified MCP endpoints and enables autonomous scheduled actions with broad tools like GitHub and AWS, which is proportionately risky and can route secrets to non-official third-party servers if misconfigured.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Oct 8, 2026, 11:39 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fai-agent-skills%2Flitellm-agent-platform%2F@4f78c7de04c74778658dcd1ccd51464ca57f5a854ee93c597e475d4637c3e348