coding-agent
Warn
Audited by Socket on Jun 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s capabilities mostly match its stated purpose, but it delegates broad authority to external coding-agent CLIs and explicitly recommends auto-approval modes that can make code changes and publish results with minimal oversight. The main concerns are autonomous real-world actions, third-party CLI trust, and reviewing untrusted repo/PR content with agents that can write and execute.
Confidence: 100%Severity: 60%
Audit Metadata