agent-ui

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core purpose is coherent, and the API key plus proxy route are proportionate for an Inference-hosted agent UI. The main concern is transitive installation of other skills/CLI and remote URL-based component retrieval, which expands trust beyond this skill and raises supply-chain risk without clear pinning or independent review.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Aug 17, 2026, 04:09 PM
Package URL
pkg:socket/skills-sh/skills-101%2Fsuperpowers%2Fagent-ui%2F@efe9654736df3e0aebd60df9c0c64b6d0ee4adf2
Security Audit — socket — agent-ui