skills/claude-world/claude-agent/bear-notes/Socket

bear-notes

Warn

Audited by Socket on Oct 7, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill's purpose is coherent, and the Bear URL-scheme fallback is legitimate, but the recommended primary path installs an unofficial personal GitHub CLI with an unpinned `@latest` source build and weak provenance. That makes the capability set plausible yet the install trust disproportionate versus the available official fallback.

Confidence: 92%Severity: 74%

Audit Metadata

Analyzed At

Oct 7, 2026, 02:14 AM

Package URL

pkg:socket/skills-sh/claude-world%2Fclaude-agent%2Fbear-notes%2F@412934b5303aede27ded74f7960931e5e53f7180129a85c5663fc21191ef722b