parallel-task-spark
Warn
Audited by Socket on Mar 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is internally coherent as a parallel development orchestrator, but it grants broad autonomous write and local commit behavior based on plan-file content that may be untrusted. No clear malware, credential theft, or external exfiltration is present, yet the combination of recursive subagent execution, repo-wide edits, and automatic commits creates meaningful operational risk.
Confidence: 88%Severity: 54%
Audit Metadata