agent-bridge
Audited by Socket on Mar 7, 2026
1 alert found:
Obfuscated FileThe skill is a tooling bridge intended to adapt and migrate plugin content across multiple AI agent runtimes. Its footprint—local Python-based bridge scripts, local directory generation, and environment-specific file mappings—appears coherent with its stated purpose. There is no indication of network exfiltration, credential handling, or remote code execution in the provided description. However, the presence of transitive bridging capabilities and multiple environment targets means caution is warranted to ensure only trusted plugins are bridged and that input validation is robust to avoid path/command injection in edge cases. Overall, the risk is low to moderate and aligns with a developer tooling usage scenario.