edict-multi-agent-orchestration
Warn
Audited by Socket on Mar 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s orchestration purpose is plausible, but its trust model is weak: it relies on third-party install artifacts not clearly tied to the skill publisher, runs an installer script, and replicates API keys across many agents/workspaces. Data flows mostly match the stated purpose, yet the supply-chain and credential-sprawl footprint is larger than necessary for a benign setup guide.
Confidence: 82%Severity: 78%
Audit Metadata