agent-export
Warn
Audited by Socket on Sep 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's purpose mostly matches its behavior, but it exports very sensitive agent state—including persona/system-prompt-derived content and arbitrary files—and uploads it to a fly.dev relay whose first-party ownership is not evident from the skill alone. That makes the data flow disproportionate and trust-sensitive even if the feature is framed as migration.
Confidence: 88%Severity: 72%
Audit Metadata