skills/wazootech/workspace-cli/wspace/Socket

wspace

Warn

Audited by Socket on Aug 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is largely aligned with a workspace-orchestration purpose and uses mostly legitimate tooling, but it grants an agent autonomous multi-ticket execution, GitHub-side actions, and secret-sync behavior with limited visibility into `wspace env sync`. Main risk is operational autonomy plus untrusted issue-content influence, not overt malware or credential exfiltration.

Confidence: 85%Severity: 63%

Audit Metadata

Analyzed At

Aug 25, 2026, 11:59 PM

Package URL

pkg:socket/skills-sh/wazootech%2Fworkspace-cli%2Fwspace%2F@251e8c6e80b1b878be61d450c32c19fbb68d3a63d1f044534b23421033b12f4a