coding-agent

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s capabilities mostly match its stated purpose, but it delegates broad authority to external coding-agent CLIs and explicitly recommends auto-approval modes that can make code changes and publish results with minimal oversight. The main concerns are autonomous real-world actions, third-party CLI trust, and reviewing untrusted repo/PR content with agents that can write and execute.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 13, 2026, 07:26 AM
Package URL
pkg:socket/skills-sh/swarmclawai%2Fswarmclaw%2Fcoding-agent%2F@65b666f7e4536da17613a5204a67ad5df94e8ae9570d36e70ede3569e370a091
Security Audit — socket — coding-agent