skills/wakqasahmed/skills/subagent-pipeline/Socket

subagent-pipeline

Warn

Audited by Socket on Aug 26, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the workflow is coherent for repo automation, but it grants broad autonomous write/comment/merge powers and processes untrusted GitHub content while able to act on the repository. Install trust is mostly acceptable for gh, yet opaque dependencies and non-trivial autonomy keep overall risk in the medium range.

Confidence: 88%Severity: 58%

Audit Metadata

Analyzed At

Aug 26, 2026, 10:08 AM

Package URL

pkg:socket/skills-sh/wakqasahmed%2Fskills%2Fsubagent-pipeline%2F@b21d1cca1e39796ea380386de7603ae0226317b58d412a8bd998146db18e387d