orchestrator
Warn
Audited by Socket on Mar 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s overall purpose is plausible, and the referenced CLIs are consistent with developer tooling, but its actual footprint exceeds a pure coordinator role. The main concerns are contradictory READONLY claims, direct command execution, autonomous draft PR creation, and use of untrusted GitHub/Jira content in workflows that can write files and trigger remote actions.
Confidence: 85%Severity: 61%
Audit Metadata