create/update agent

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is largely aligned with its stated purpose of creating/updating Harness agents and uses official Harness MCP concepts, but it materially enables high-impact autonomous workflows, broad tool permissions, and routing to arbitrary external MCP servers with tokens. The main concern is downstream scope and data-flow flexibility rather than clear malicious intent.

Confidence: 84%Severity: 63%
Audit Metadata
Analyzed At
Mar 28, 2026, 09:03 AM
Package URL
pkg:socket/skills-sh/thisrohangupta%2Fharness-skills%2Fcreateupdate-agent%2F@9da2508c959baf95f86e4f5d4e2f3ca9c6c96e15
Security Audit — socket — create/update agent