code-architect
Warn
Audited by Socket on Oct 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The stated purpose is coherent, but the skill's real function is to hand work to an external `codex-subagent` runtime and another subagent definition that are not included here. With no verified provenance for `codex-subagent` and a transitive trust chain, this is higher-risk than a normal documentation-only skill, though there is no direct evidence of credential theft or malware.
Confidence: 82%Severity: 58%
Audit Metadata