custom-agent-definitions
Audited by Socket on Mar 9, 2026
1 alert found:
Obfuscated FileThe skill content is a benign, documentation-level framework for defining custom agents within Claude Code. The stated purpose and capabilities align with the described configuration schema (name, model, context, allowed/disallowed tools, and agent delegation). The primary security considerations hinge on runtime enforcement of tool restrictions, proper separation via context fork, and careful handling of logs to avoid inadvertent data leakage. No external downloads, unverifiable binaries, or credential harvesting patterns are present in the provided material. If implemented with strict enforcement of allowed/disallowed tools and proper logging practices, the risk remains low (benign). However, due diligence is required to ensure runtime policy enforcement is robust to prevent misuse of Bash/Write/Edit capabilities and to avoid unintended data exposure in logs or shared contexts.