auto-task

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's stated purpose matches autonomous task orchestration, but its footprint is overly broad: unrestricted Bash, arbitrary MCP tools, external content ingestion, sub-agents, and background execution with limited user interruption. There is no direct malware or credential-stealing behavior, but the combination creates high operational risk and weak data-flow assurance for a generic 'auto-task' skill.

Confidence: 87%Severity: 76%
Audit Metadata
Analyzed At
Sep 17, 2026, 01:03 PM
Package URL
pkg:socket/skills-sh/yunshu0909%2Fyunshu_skillshub%2Fauto-task%2F@89c57cccbac93b3b4189623cdab0aa1322b4f916f0145bcce4b86ecefda21961