do-work

Warn

Audited by Socket on Mar 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's stated purpose matches a task-queue/orchestration tool, but its footprint includes autonomous background work, delegated action execution, and repo commits, which are high-impact capabilities for a routing skill. No clear credential theft, exfiltration, or malicious data flow is visible in the provided content, so this is better classified as a risky automation skill than malware.

Confidence: 79%Severity: 64%
Audit Metadata
Analyzed At
Mar 13, 2026, 01:13 PM
Package URL
pkg:socket/skills-sh/knews2019%2Fskill-do-work%2Fdo-work%2F@d7d56cb7e63c350242f2103a2150ce9c87f63a3c