mercury-agent-deployment
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the documentation is internally consistent with deploying a powerful local agent, and the main installer provenance is official. The main risk is not hidden malware but the framework’s broad autonomous footprint: shell/filesystem access, daemon mode, Telegram messaging, persistent memory, and installable community skills that inherit agent privileges.
Confidence: 84%Severity: 62%
Audit Metadata