autoplan
Warn
Audited by Socket on Oct 26, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s purpose matches an orchestration/review pipeline, but its footprint is broad. It executes many local helper binaries, transitively loads other skills, can modify repo files and git history, and optionally sends telemetry/sync data. This looks like an aggressive but coherent automation skill, not confirmed malware; the main concerns are transitive trust, mutable local-script execution, and high-autonomy repo actions.
Confidence: 87%Severity: 72%
Audit Metadata