agency

Warn

Audited by Socket on Apr 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is broadly aligned with a local creative-production orchestrator, but its wide Bash/write/agent permissions, self-modifying evolution flow, and transitive skill-copy behavior make it higher risk than a normal documentation or single-purpose workflow skill. No clear credential theft, exfiltration endpoint, or direct malicious payload is present.

Confidence: 85%Severity: 56%
Audit Metadata
Analyzed At
Apr 7, 2026, 06:38 PM
Package URL
pkg:socket/skills-sh/modu-ai%2Fmoai-adk%2Fagency%2F@2f73e513b694d1bcb79e5720763a84964b38135e