triage

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is coherent, but the implementation relies on unverifiable local CLIs—especially `lc`, which appears not to be an official Linear-owned tool based on the evidence. Because such a binary likely receives Linear credentials and project data, the skill carries high supply-chain and credential-forwarding risk despite otherwise reasonable functionality.

Confidence: 88%Severity: 84%
Audit Metadata
Analyzed At
Oct 9, 2026, 03:38 AM
Package URL
pkg:socket/skills-sh/cerico%2Fmacfair%2Ftriage%2F@62ddba83e4559ad6cf86302d771f6c657c538e05c42e6f08abbba80dd0f13947