verify-ui-change-in-cloud
Warn
Audited by Socket on Aug 26, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is broadly aligned with its stated purpose of remote UI verification for the Warp repo, and it uses same-org tooling rather than obvious malicious installers. However, it expands scope by autonomously spawning a remote computer-use agent, depends on a hard-coded non-public environment ID, and chains trust into another skill, so the remote execution footprint is higher than a simple local verification helper.
Confidence: 82%Severity: 56%
Audit Metadata