skills/adrianbrowning/agent-skills/cc-pr-review/Socket

cc-pr-review

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core PR-review behavior is coherent and uses expected local git/GitHub tooling, with no malicious installer or off-platform exfiltration. However, the combination of `bypassPermissions`, autonomous PR commenting, dynamic loading of additional local skills, and broad enumeration of local skill files expands trust and access beyond a narrowly scoped review workflow.

Confidence: 88%Severity: 63%

Audit Metadata

Analyzed At

Oct 8, 2026, 10:32 PM

Package URL

pkg:socket/skills-sh/adrianbrowning%2Fagent-skills%2Fcc-pr-review%2F@abe0048670bdb1d38a17045bd9910b0e2127c7eaada609b19663646d142d1c91