harness-offload

Warn

Audited by Socket on Oct 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the real execution and trust boundary sit in an unseen PowerShell dispatcher and external worker CLIs. The skill is not overtly malicious from the provided content, yet it delegates actions to third-party agent tools, may persist permission changes in a user config file, and relies on transitive worker-specific skills not supplied for review.

Confidence: 79%Severity: 58%
Audit Metadata
Analyzed At
Oct 11, 2026, 11:56 AM
Package URL
pkg:socket/skills-sh/timsonner%2Fagent-skills%2Fharness-offload%2F@0fac7ea84c4ed79d491da25b9d29f79ba9427bd43b07f1592efe7167e15b9fba