AI Data Remediation Engineer

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the overall purpose is coherent for a data-remediation skill, and the dependencies are broadly consistent with local/offline processing. The main issue is disproportionate execution trust inside the workflow itself: it uses eval() on model-generated code with weak validation, which is unsafe even if Ollama is local. Marketing claims of fully air-gapped zero-egress behavior are also overstated because models/packages are typically fetched externally and webhook alerting is mentioned. Not confirmed malware, but a medium-high risk skill due to code-execution design and integrity gaps.

Confidence: 87%Severity: 68%
Audit Metadata
Analyzed At
Jul 23, 2026, 02:37 PM
Package URL
pkg:socket/skills-sh/tcvdog%2Fagency-agents-hermes%2Fai-data-remediation-engineer%2F@db9a5cb1e42096c9b0ee504b675102ec68eb4575
Security Audit — socket — AI Data Remediation Engineer