agent-dev-backend-api

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core API-development purpose is plausible, but the skill’s footprint extends into automatic external learning/telemetry through npx claude-flow@alpha. The main concerns are mutable third-party execution and forwarding task context/output to an external CLI, which is only loosely proportionate to backend coding assistance.

Confidence: 83%Severity: 66%
Audit Metadata
Analyzed At
Sep 15, 2026, 11:37 AM
Package URL
pkg:socket/skills-sh/ruvnet%2Fruflo%2Fagent-dev-backend-api%2F@a344e5e8ff99280a5adb46037d55fc18bc6500f94942793801e4c704f378c036
Security Audit — socket — agent-dev-backend-api