openmonoagent-local-ai-coding-agent
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's capabilities broadly match a local coding agent, but the install path relies on unpinned curl-to-bash from raw GitHub and the optional relay/remote inference features weaken the purely local story. No clear credential theft or covert exfiltration is shown, but install trust and high-impact execution scope make this medium risk.
Confidence: 87%Severity: 61%
Audit Metadata