mercury-agent-deployment

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the documentation is internally consistent with deploying a powerful local agent, and the main installer provenance is official. The main risk is not hidden malware but the framework’s broad autonomous footprint: shell/filesystem access, daemon mode, Telegram messaging, persistent memory, and installable community skills that inherit agent privileges.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Oct 8, 2026, 11:39 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fai-agent-skills%2Fmercury-agent-deployment%2F@3bcb9bc05bf55f71d1cfe4b9cfefedc0a9151a8aeec5ed5186a7e16689293463