skills/brevdev/nemoclaw-demos/claude-code/Socket

claude-code

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill's coding-assistant purpose is plausible, but its actual footprint relies on an unverifiable local runner and routes GitHub-authenticated actions through an undisclosed proxy endpoint. The delegation model is broader than necessary, and the proxy/token flow is not aligned with official GitHub API data paths.

Confidence: 84%Severity: 82%

Audit Metadata

Analyzed At

Jul 22, 2026, 08:29 AM

Package URL

pkg:socket/skills-sh/brevdev%2Fnemoclaw-demos%2Fclaude-code%2F@0d95e861aed74c1f448735e643c8e4d834e23103b853cf13bd8cdfd304567db1