workflow-orchestrator

Warn

Audited by Socket on Mar 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s core purpose is coherent, but it grants a highly autonomous implementation workflow with Bash, broad file modification, team orchestration, and auto-executed sharing. No clear malware or credential theft appears, yet the approval model and undocumented local helpers/notification path make the operational risk medium-high.

Confidence: 83%Severity: 62%
Audit Metadata
Analyzed At
Mar 12, 2026, 11:58 PM
Package URL
pkg:socket/skills-sh/nguyenthienthanh%2Faura-frog%2Fworkflow-orchestrator%2F@b05f34e62813e9c7ac68a4aaa4239846b2639b49