Composer plugin for managing AI agent skills
82%
Total Score
83
100
100
All 15 recent commits came from one contributor, creating a genuine continuity risk; organization ownership provides some handoff capacity but no second active contributor is shown.
All seven workflows were analyzed, use read-only permissions, and contain no reported audit findings or untrusted checkouts. However, all 11 action references are unpinned, leaving a modest reproducibility and action-integrity gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^5.4|^6.0|^7.0|^8.0 | — | — |
composer/semver Version ^3.0 | — | — |
symfony/console Version ^5.4|^6.0|^7.0|^8.0 | — | — |
symfony/process Version ^5.4|^6.0|^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.