blink-github

Warn

Audited by Socket on Apr 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's GitHub functionality is purpose-aligned, but data and effective credentials flow through Blink's intermediary connector service rather than directly to GitHub, creating a meaningful trust and data-flow risk. The unverified provenance of the required `blink` CLI adds medium supply-chain concern, though the evidence does not show confirmed malware.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Apr 27, 2026, 08:55 AM
Package URL
pkg:socket/skills-sh/blink-new%2Fblink-plugin%2Fblink-github%2F@daf060bd023763784f1398cec4ef18974db2c721
Security Audit — socket — blink-github