team-tech-debt
Warn
Audited by Socket on Apr 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s purpose and capabilities mostly align with tech-debt remediation, but it grants broad autonomous write/exec powers, processes untrusted repository content, and depends on partially unverifiable orchestration components. No clear credential theft or exfiltration path is shown, so this is not malicious, but it is a medium-risk agent skill.
Confidence: 81%Severity: 58%
Audit Metadata