autoplan

Warn

Audited by Socket on Oct 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose matches an orchestration/review pipeline, but its footprint is broad. It executes many local helper binaries, transitively loads other skills, can modify repo files and git history, and optionally sends telemetry/sync data. This looks like an aggressive but coherent automation skill, not confirmed malware; the main concerns are transitive trust, mutable local-script execution, and high-autonomy repo actions.

Confidence: 87%Severity: 72%
Audit Metadata
Analyzed At
Oct 26, 2026, 06:33 PM
Package URL
pkg:socket/skills-sh/thetalentcat%2Fclaude-skills%2Fautoplan%2F@a2eef09bafe6ea1b2b37ba688eac8a9ddddcbcff