skills/browseros-ai/browseros-agent/dev7-pr/Socket

dev7-pr

Warn

Audited by Socket on Aug 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The core GitHub capabilities fit the skill's purpose, and install trust is low-risk because it uses standard git and official gh tooling. Risk comes from autonomous external actions and from consuming third-party/untrusted review comments, then modifying and pushing code based on them; Greptile also adds a third-party data access boundary.

Confidence: 87%Severity: 61%

Audit Metadata

Analyzed At

Aug 14, 2026, 12:38 AM

Package URL

pkg:socket/skills-sh/browseros-ai%2Fbrowseros-agent%2Fdev7-pr%2F@f31bfcc7bca38b224e860211e7d85ab012f305313b5cd5a034c4d0d691c2f981