autopilot

Warn

Audited by Socket on Sep 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The install path uses a legitimate ecosystem, but the skill's real footprint is unusually broad: it grants unattended execution across coding, deployment, E2E, review, and issue operations, and it relies on a transitive install of community-published skill content. This is not confirmed malware, but it is high-trust automation with meaningful supply-chain and operational risk disproportionate to normal helper skills.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Sep 13, 2026, 10:11 AM
Package URL
pkg:socket/skills-sh/yan-labs%2Fyan-skills%2Fautopilot%2F@8c3fcf048ecc45adc138098efc5fb8086a633efa05807577e4a7b69eb17654b9
Security Audit — socket — autopilot