blink-github
Warn
Audited by Socket on Apr 27, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's GitHub functionality is purpose-aligned, but data and effective credentials flow through Blink's intermediary connector service rather than directly to GitHub, creating a meaningful trust and data-flow risk. The unverified provenance of the required `blink` CLI adds medium supply-chain concern, though the evidence does not show confirmed malware.
Confidence: 84%Severity: 74%
Audit Metadata