autopilot
Warn
Audited by Socket on Sep 27, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill's purpose aligns with orchestration, but it combines transitive skill installation with fully unattended code/deploy/release-style actions. The install path is officially documented and the referenced repo appears legitimate, so this is not confirmed malware, but the trust chain and autonomous real-world effects make it high risk.
Confidence: 84%Severity: 78%
Audit Metadata