agent-dev-backend-api
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core API-development purpose is plausible, but the skill’s footprint extends into automatic external learning/telemetry through npx claude-flow@alpha. The main concerns are mutable third-party execution and forwarding task context/output to an external CLI, which is only loosely proportionate to backend coding assistance.
Confidence: 83%Severity: 66%
Audit Metadata