review-open-prs
Warn
Audited by Socket on Jul 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core GitHub/Linear review behavior is coherent and uses official services, but the skill is over-broad and includes automatic Slack posting of org-wide PR data without asking the user. Merge/rebase/push capabilities are proportionate only because they are explicitly approval-gated; the main risk is autonomous outbound communication plus broad cross-repo data handling.
Confidence: 87%Severity: 64%
Audit Metadata