devs-roundtable

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core multi-agent code-review/debate behavior is coherent with the stated purpose and does not itself show malicious exfiltration. However, the optional feedback mechanism introduces an unnecessary external runtime dependency (`npx ...@latest`) and routes user-entered data to hivenet.app, which is only loosely verifiable from the skill publisher context. This is better classified as medium supply-chain and telemetry risk than malware.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Sep 28, 2026, 10:02 PM
Package URL
pkg:socket/skills-sh/zvadaadam%2Faz-skills%2Fdevs-roundtable%2F@a10e88de0bfa95b8d759454a02c322d48612c4b5a3b521e53263c02a2ed1637e