skills/benjitaylor/agentation/agentation/Socket

agentation

Fail

Audited by Socket on Mar 18, 2026

1 alert found:

Malware

MalwareSKILL.md

HIGH

MalwareHIGH

SKILL.md

SUSPICIOUS: the file-editing portion matches the stated Next.js toolbar setup, but the skill also installs and auto-registers an external MCP server via unpinned `npx`, expanding trust and creating an unclear data path. The main concern is supply-chain and transitive tool installation rather than confirmed malware.

Confidence: 82%Severity: 74%

Audit Metadata

Analyzed At

Mar 18, 2026, 04:48 PM

Package URL

pkg:socket/skills-sh/benjitaylor%2Fagentation%2Fagentation%2F@681e4c2a06b0959f92b1a55d5043866e7f6f6c9b