code-architect

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The stated purpose is coherent, but the skill's real function is to hand work to an external `codex-subagent` runtime and another subagent definition that are not included here. With no verified provenance for `codex-subagent` and a transitive trust chain, this is higher-risk than a normal documentation-only skill, though there is no direct evidence of credential theft or malware.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
Oct 9, 2026, 02:45 PM
Package URL
pkg:socket/skills-sh/troykelly%2Fcodex-skills%2Fcode-architect%2F@3e914f9a6964578cb6077b0847eb6927fb889a481b1d29008039758c57acf89f