autonomous-loop

Fail

Audited by Socket on Feb 23, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
scripts/init_loop_skill.py

This module is a scaffold generator (not obviously malware itself) but contains multiple high-risk constructs: unsanitized injection of template content into executable files (direct code injection vector), generation of a run loop that reads local state and sends it to an external assistant invoked with permissive flags (data exfiltration risk), and documentation encouraging automated commits and assistant configuration changes (persistence/privilege risk). Treat as potentially dangerous: do not run generated run_loop.sh or execute generated scripts without manual review and removal/sanitization of injected code and removal of any automatic exfiltration instructions. Validate TEMPLATES integrity from trusted sources and avoid sending local files to third-party assistants or disable 'dangerously-skip-permissions'.

Confidence: 98%
Audit Metadata
Analyzed At
Feb 23, 2026, 02:59 AM
Package URL
pkg:socket/skills-sh/NCMcClure%2Fprotospatial-agent-kit%2Fautonomous-loop%2F@0c0d823ba9e80f3bd84f98fb86aceff3ee5bfe96