create/update agent
Warn
Audited by Socket on Mar 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill is largely aligned with its stated purpose of creating/updating Harness agents and uses official Harness MCP concepts, but it materially enables high-impact autonomous workflows, broad tool permissions, and routing to arbitrary external MCP servers with tokens. The main concern is downstream scope and data-flow flexibility rather than clear malicious intent.
Confidence: 84%Severity: 63%
Audit Metadata