hcom-agent-messaging
Warn
Audited by Socket on Apr 11, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s capabilities broadly match its stated purpose and the install source appears to be same-project and officially documented, so this is not strong evidence of malware. However, it grants very powerful cross-agent control, transcript access, terminal injection, and relay-based messaging, making it a high-impact coordination tool that should be treated as medium/high security risk rather than benign.
Confidence: 84%Severity: 68%
Audit Metadata