openmonoagent-local-ai-coding-agent

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's capabilities broadly match a local coding agent, but the install path relies on unpinned curl-to-bash from raw GitHub and the optional relay/remote inference features weaken the purely local story. No clear credential theft or covert exfiltration is shown, but install trust and high-impact execution scope make this medium risk.

Confidence: 87%Severity: 61%
Audit Metadata
Analyzed At
Oct 8, 2026, 11:40 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fai-agent-skills%2Fopenmonoagent-local-ai-coding-agent%2F@31cba601b184811ebc495addf38b5e5238ff166179ab64724a81945a8d8d0996