cursor-review

Warn

Audited by Socket on Jun 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent for a review skill, but the skill forwards full local diffs through opaque harness routing scripts whose final endpoint is not disclosed. It is not clearly malicious, yet the hidden backend/model routing and externalization of source code make it a medium-risk review helper.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 14, 2026, 08:22 AM
Package URL
pkg:socket/skills-sh/Chachamaru127%2Fclaude-code-harness%2Fcursor-review%2F@74c1169615382ba1d3cf926fbf6cb8205bd61a2c7411a27c885b26a4b570a02b
Security Audit — socket — cursor-review