harness-offload
Warn
Audited by Socket on Oct 11, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated purpose is coherent, but the real execution and trust boundary sit in an unseen PowerShell dispatcher and external worker CLIs. The skill is not overtly malicious from the provided content, yet it delegates actions to third-party agent tools, may persist permission changes in a user config file, and relies on transitive worker-specific skills not supplied for review.
Confidence: 79%Severity: 58%
Audit Metadata