bugfix

Warn

Audited by Socket on Feb 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

[Skill Scanner] Skill instructions include directives to hide actions from user The analyzed code fragment presents a coherent, purpose-aligned bugfix orchestration skill. It leverages internal memory workspace APIs to register context and manage the remediation loop across roles. There is no evident malicious behavior, credential handling, or external data exfiltration indicated in the fragment. Security risk appears low for what is shown, though real-world usage should ensure proper access controls to memory APIs and validation of inputs to prevent abuse of the automation flow. LLM verification: The skill's functionality matches its stated purpose (automated bug‑fix orchestration). The provided code/instructions do not contain explicit malware, hardcoded credentials, or obfuscated payloads. However, because it grants agents authority to read and modify repository files and run arbitrary tests/commands without enforced per-action approvals or explicit file/network boundaries, it creates a moderate supply‑chain and operational risk. If deployed, require additional safeguards: explicit use

Confidence: 65%Severity: 50%
Audit Metadata
Analyzed At
Feb 23, 2026, 03:42 PM
Package URL
pkg:socket/skills-sh/DS-codi%2FProject-Memory-MCP%2Fbugfix%2F@5f937055a56c6c63110a22561dc76e7c2b8ae7a2