file-sync

Warn

Audited by Socket on Apr 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The skill is mostly aligned with its stated purpose: syncing config and shared work files with centralized MinIO storage. The main concerns are opaque remote-transfer tooling, automatic background sync, and remote hot-reload of config/skills without visible endpoint or provenance details. This is better classified as suspicious-than-benign from a security perspective, but not malicious based on the provided text alone.

Confidence: 79%Severity: 58%
Audit Metadata
Analyzed At
Apr 6, 2026, 08:12 AM
Package URL
pkg:socket/skills-sh/agentscope-ai%2FHiClaw%2Ffile-sync%2F@229479ed6836f963185097c190039676175079b1