skills/andysolomon/skills/creating-user-stories/Socket

creating-user-stories

Warn

Audited by Socket on Sep 3, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

The skill is purpose-aligned for backlog and GitHub project management, and its GitHub CLI usage is consistent with that purpose. Main risk comes from autonomous external GitHub mutations and the unspecified oracle tool that may receive repository context; this makes the skill suspicious/high-risk from an agent-safety perspective, but not malicious.

Confidence: 84%Severity: 72%

Audit Metadata

Analyzed At

Sep 3, 2026, 01:05 PM

Package URL

pkg:socket/skills-sh/andysolomon%2Fskills%2Fcreating-user-stories%2F@a7de64a2f1b05cf69c274e333bd848d89c2264f2ba79db03b195ccfe9c09dd42