research-pipeline
Warn
Audited by Socket on Mar 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose is coherent for a research automation skill, but its actual footprint is broad and high-risk. Unrestricted Bash, remote deployment, transitive downstream skills, autonomous long-running loops, and ingestion of untrusted web content together create significant security exposure even without explicit malware or credential theft behavior in this file.
Confidence: 87%Severity: 79%
Audit Metadata