feature-auto

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose and capabilities mostly align, but it deliberately removes user-approval safeguards and adds transitive plugin installation risk. It is not overtly malicious or exfiltrative, yet it materially increases operational risk by letting the agent make and fix code changes autonomously without checkpoints.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
Apr 2, 2026, 11:46 AM
Package URL
pkg:socket/skills-sh/shotaiuchi%2Fdotclaude%2Ffeature-auto%2F@db4082156d8c166a5da6f93dc878f0bbb2e2df62
Security Audit — socket — feature-auto