plan-execute

Warn

Audited by Socket on Feb 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The code fragment describes a comprehensive, multi-agent orchestration workflow intended to manage complex tasks end-to-end (planning, task breakdown, verification, PR flow, and deployment). This is coherent with a purpose of coordinating a project plan and implementation lifecycle. There are no explicit malicious patterns (no hardcoded secrets, no download-execute patterns, no exfiltration endpoints). However, the workflow introduces significant autonomy and powerful repository/CI/CD actions that, if misused or misconfigured, could lead to large-scale unintended changes. The absence of explicit access control, secret handling strategies, and human gating around critical steps (e.g., auto-merge, deployment) elevates risk modestly. Overall, classify as BENIGN with MEDIUM risk due to high operational power and potential for misconfiguration; treat as SUSPICIOUS if used beyond a tightly controlled environment or without explicit safeguards.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Feb 28, 2026, 10:32 AM
Package URL
pkg:socket/skills-sh/codyswanngt%2Flisa%2Fplan-execute%2F@9e3d42d2b9dc66c8d019c594282b8b6f9287463e