yolo
Warn
Audited by Socket on Mar 13, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the behavior matches the stated 'yolo' purpose, but that purpose is inherently high-risk for an agent skill because it performs publication and deployment actions autonomously, with no confirmations and no validation of remote or deploy target. The main issue is not malware or hidden exfiltration, but disproportionate autonomy over real-world actions.
Confidence: 92%Severity: 86%
Audit Metadata