maggy
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill’s broad capabilities mostly match its stated engineering-dashboard purpose, but the unconditional use of `claude --dangerously-skip-permissions` on issue-derived prompts creates a high-risk autonomous execution and prompt-injection path. No clear malicious exfiltration endpoint is shown, so this is better classified as a dangerous/high-risk skill rather than confirmed malware.
Confidence: 88%Severity: 83%
Audit Metadata