skills/aymericderbois/skills/global-review/Socket

global-review

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill's review-orchestration purpose is coherent, but its actual footprint depends on transitive execution of 9 external skills with incomplete provenance and no pinning. The main concern is delegated supply-chain trust and weakly enforced read-only scope, not confirmed malicious behavior in the wrapper itself.

Confidence: 85%Severity: 74%

Audit Metadata

Analyzed At

Jul 20, 2026, 08:18 PM

Package URL

pkg:socket/skills-sh/aymericderbois%2Fskills%2Fglobal-review%2F@4d93b533fc048041adaed3411249ba6a4cb031875de6b77397c0818f624bf6c4