git-delegation-management
Warn
Audited by Socket on Oct 21, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core purpose is coherent—delegated git for Workers without credentials—but the implementation is overbroad: it tells the Manager to execute Worker-supplied commands literally, with host git credentials, networked repo access, and shared storage sync. This is not confirmed malware, but it is a high-risk proxy-execution skill with disproportionate trust in upstream agent input.
Confidence: 90%Severity: 84%
Audit Metadata