kanban

Warn

Audited by Socket on Jul 9, 2026

1 alert found:

Anomaly
AnomalyLOW
kanban_agent_skill/SKILL.md

SUSPICIOUS. The skill's capabilities mostly match its Kanban-management purpose, and there is no clear malware, hidden installer, or credential harvesting. However, the combination of no authentication, arbitrary/external board targeting, live destructive write access, and a transitive shared-skill install flow creates meaningful security risk that is disproportionate to a typical collaboration skill.

Confidence: 87%Severity: 68%
Audit Metadata
Analyzed At
Jul 9, 2026, 01:30 PM
Package URL
pkg:socket/skills-sh/Starchild-ai-agent%2Fofficial-skills%2Fkanban%2F@78a4177dd87602c9e370ac150b0efdebfee9e24c6f87f203cc3f84d472aeb73b
Security Audit — socket — kanban