session-review

Warn

Audited by Socket on Sep 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the review goal is plausible, but the skill's footprint extends into transitive skill trust and optional external model routing without clearly bounded provenance or data-flow controls. The main risk is delegating repo context/files to an ambiguously sourced reviewer that may also browse untrusted web content and then drive local changes.

Confidence: 83%Severity: 76%
Audit Metadata
Analyzed At
Sep 1, 2026, 06:34 PM
Package URL
pkg:socket/skills-sh/awrshift%2Fagent-memory-kit%2Fsession-review%2F@abf7d5e5b965fde4939f856bd8467a6a483a8eab39a84267a2155b72b14d08e8
Security Audit — socket — session-review