do-work
Warn
Audited by Socket on Mar 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's stated purpose matches a task-queue/orchestration tool, but its footprint includes autonomous background work, delegated action execution, and repo commits, which are high-impact capabilities for a routing skill. No clear credential theft, exfiltration, or malicious data flow is visible in the provided content, so this is better classified as a risky automation skill than malware.
Confidence: 79%Severity: 64%
Audit Metadata