skills/agentscope-ai/agentteams/file-sync/Socket

file-sync

Warn

Audited by Socket on Oct 21, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s purpose is coherent for centralized file/config sync, but it grants high trust to opaque helper tooling that pulls remote config and skills into ~/.hermes/ and uploads files to storage. The main concern is install/execution trust and partially opaque data flow, not confirmed malicious intent.

Confidence: 82%Severity: 74%

Audit Metadata

Analyzed At

Oct 21, 2026, 04:29 PM

Package URL

pkg:socket/skills-sh/agentscope-ai%2Fagentteams%2Ffile-sync%2F@24b6140c6597467eca94483d8840d5e5a74dac4fbbc135299eba9d07d9995564