skills/steloit/squad-skills/squad/Socket

squad

Warn

Audited by Socket on Jul 24, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s capabilities mostly match its stated purpose, and its use of jq/python3 is normal. However, it relies on an unverified local `api` helper plus a not-independently-verifiable remote service domain, while handling auth tokens and performing remote mutations and uploads; this creates medium security risk despite otherwise coherent task-management behavior.

Confidence: 78%Severity: 58%

Audit Metadata

Analyzed At

Jul 24, 2026, 10:35 AM

Package URL

pkg:socket/skills-sh/steloit%2Fsquad-skills%2Fsquad%2F@923b319c8be6859b5105dc33dc916e02b1a3621613ea7626440f6062e4c97cfd