pueue-job-orchestration
Audited by Socket on Mar 10, 2026
1 alert found:
Obfuscated FileOverall, the skill footprint is largely coherent with its stated purpose of orchestrating long-running and batch tasks via pueue, including remote execution and telemetry. However, several risk signals warrant caution: remote command execution on external hosts introduces command-injection-like risk if the agent operates autonomously without explicit prompts; exponential task growth due to restart semantics remains a concern in autonomous use; and data flows involving telemetry/logs could lead to unintended data exposure if destinations or retention policies are not well defined. These risks elevate the profile toward suspicious rather than strictly benign, particularly in contexts where agents may act without continuous user oversight. Implement strong per-action prompts, explicit authorization checks, robust logging governance, and verifiable sources for any external scripts or binaries to reduce risk.