manage-agent

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/install-amctl.sh

No explicit malicious payload is present in this wrapper. However, piping an unpinned remote installer directly to a shell creates a significant supply-chain and arbitrary-code-execution risk dependent on the upstream repository and network delivery. Review and pin or verify the installer before use.

Confidence: 98%Severity: 68%
Audit Metadata
Analyzed At
Sep 25, 2026, 02:42 PM
Package URL
pkg:socket/skills-sh/wso2%2Fagent-skills%2Fmanage-agent%2F@3753dc8a97cf8d40227a915357f5aedae6d20fac8a92419e764171bf62704447