skills/cleodin/antigravity-awesome-skills/codex-review/Socket

codex-review

Warn

Audited by Socket on Apr 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the visible skill is mainly a transitive installer for a third-party personal GitHub skill with weak provenance and no pinned or verifiable release path. The stated purpose is plausible, but install trust is weaker than expected and the actual post-install behavior is underdocumented, so risk is medium even without confirmed malicious data exfiltration.

Confidence: 82%Severity: 58%

Audit Metadata

Analyzed At

Apr 15, 2026, 06:11 PM

Package URL

pkg:socket/skills-sh/cleodin%2Fantigravity-awesome-skills%2Fcodex-review%2F@81d398fbe5613d9dee8da54bb68682792f10c7c4