babysit
Warn
Audited by Socket on Jul 12, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill is purpose-aligned for PR maintenance and shows no malicious install path or off-platform exfiltration, but it gives an agent broad autonomous authority to act on untrusted PR comments and CI output, modify code, and push repeatedly. Main risk is repository integrity and prompt-injection-driven actions, not confirmed malware.
Confidence: 89%Severity: 62%
Audit Metadata