ae-agent

Warn

Audited by Socket on Sep 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is largely aligned with its stated AE platform administration purpose and uses plausibly official ae-cli distribution paths, but it has a broad operational footprint, handles sensitive credentials/tokens, includes silent internal actions, and introduces transitive trust through `npx skills add`. This is not confirmed malware, but it is a medium-risk administrative skill that should be treated carefully.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Sep 11, 2026, 02:33 AM
Package URL
pkg:socket/skills-sh/thinkingaiagenticengine%2Fae-cli%2Fae-agent%2F@284ac25e279906168321b7f1debef9d86ad81c23f60845b0c3429c438a4077e0
Security Audit — socket — ae-agent