align-repo

Warn

Audited by Socket on Oct 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core file-audit behavior is coherent and low-risk, but the skill unnecessarily includes transitive skill installation and self-update steps. Those external skill loads broaden trust and capabilities beyond simple repo alignment, raising medium security risk without clear need.

Confidence: 90%Severity: 56%
Audit Metadata
Analyzed At
Oct 7, 2026, 01:20 PM
Package URL
pkg:socket/skills-sh/apocohq%2Fskills%2Falign-repo%2F@301e0785d918a2c2c6f5eeff93e8ceeae24f23442e2ced8258de4e1870cc8c1a