gauntlet

Warn

Audited by Socket on Sep 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the visible skill purpose and actions are broadly coherent for ticket orchestration, and the Linear data path appears official. However, the core functionality depends on an unreviewed local executable runner and a separate workflow not provided here, so install/execution trust cannot be verified; that alone makes the skill medium-high risk even without evidence of explicit exfiltration or malicious intent.

Confidence: 88%Severity: 72%
Audit Metadata
Analyzed At
Sep 2, 2026, 01:55 PM
Package URL
pkg:socket/skills-sh/canhassancode%2Fskills%2Fgauntlet%2F@a75bb11d7fa6c94b00dc78b6ad3651744cb404df0e1e5e5e1afcb37261cf4b56