hcom-agent-messaging

Warn

Audited by Socket on Apr 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities broadly match its stated purpose and the install source appears to be same-project and officially documented, so this is not strong evidence of malware. However, it grants very powerful cross-agent control, transcript access, terminal injection, and relay-based messaging, making it a high-impact coordination tool that should be treated as medium/high security risk rather than benign.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
Apr 11, 2026, 04:55 AM
Package URL
pkg:socket/skills-sh/aannoo%2Fhcom%2Fhcom-agent-messaging%2F@5a713b2cf8f9f2fc9654c87056ae13396ed625ec