review-panel
Warn
Audited by Socket on Aug 28, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s review-orchestration purpose is plausible, but its actual footprint is broad: it spawns multiple external agent contexts, may route work through an unverified `spawn-agent` tool or arbitrary local CLIs, and combines untrusted content processing with code-writing autonomy. The main concern is execution trust and transitive data exposure, not confirmed malware.
Confidence: 87%Severity: 81%
Audit Metadata