ai-automation-workflows
Warn
Audited by Socket on Aug 6, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core workflow purpose matches the examples, but the skill expands trust through transitive skill installation, broad bash capability, and remote CLI installation. Data flows to inference/model services are expected, yet webhook/error forwarding and automation templates could expose local content if misused. Not confirmed malware, but medium-high operational and supply-chain risk.
Confidence: 87%Severity: 74%
Audit Metadata