auto-researching
Warn
Audited by Socket on Mar 27, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill's core behavior is an indefinite autonomous experiment loop that modifies code, runs repository-derived commands, and continues without further user approval. There is no clear credential theft or malware payload, but the autonomy and exec scope are disproportionate and create high operational risk.
Confidence: 90%Severity: 78%
Audit Metadata