github

Warn

Audited by Socket on Mar 30, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated GitHub purpose is plausible, but the actual footprint is a third-party gateway that intermediates authentication and all GitHub data/actions. That proxy design, combined with broad write capabilities and credential forwarding through non-official infrastructure, is not proportionate to a normal GitHub skill.

Confidence: 87%Severity: 86%
Audit Metadata
Analyzed At
Mar 30, 2026, 02:44 PM
Package URL
pkg:socket/skills-sh/aiagenta2z%2Fonekey-gateway%2Fgithub%2F@022bf233f1b1a00a3bebd4edf1c90f62244c3678
Security Audit — socket — github