git-delegation-management

Warn

Audited by Socket on Oct 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core purpose is coherent—delegated git for Workers without credentials—but the implementation is overbroad: it tells the Manager to execute Worker-supplied commands literally, with host git credentials, networked repo access, and shared storage sync. This is not confirmed malware, but it is a high-risk proxy-execution skill with disproportionate trust in upstream agent input.

Confidence: 90%Severity: 84%
Audit Metadata
Analyzed At
Oct 21, 2026, 04:29 PM
Package URL
pkg:socket/skills-sh/agentscope-ai%2Fagentteams%2Fgit-delegation-management%2F@c9e9dd4e3392fd1bccf8427e2a74b97e0068fbc1a2b3863db84beab64633a042