devs-roundtable
Warn
Audited by Socket on Sep 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core multi-agent code-review/debate behavior is coherent with the stated purpose and does not itself show malicious exfiltration. However, the optional feedback mechanism introduces an unnecessary external runtime dependency (`npx ...@latest`) and routes user-entered data to hivenet.app, which is only loosely verifiable from the skill publisher context. This is better classified as medium supply-chain and telemetry risk than malware.
Confidence: 88%Severity: 56%
Audit Metadata