team-init
Warn
Audited by Socket on Mar 13, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill is internally coherent for creating local agent teams and shows no external installer or credential-exfiltration path, but it grants spawned agents bypassPermissions and includes offensive-security team modes. The main risk is excessive autonomous capability, not malware or supply-chain abuse.
Confidence: 90%Severity: 74%
Audit Metadata