review-work

Warn

Audited by Socket on Jul 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s review purpose broadly matches its capabilities, but its footprint is expansive for a review helper. The main risks are autonomous multi-agent execution, extensive repo/context collection, and especially ingestion of untrusted GitHub/Slack/Notion content by agents that can run commands and access files. No confirmed malware or overt credential theft is present, but the skill is medium-high risk and should be treated carefully in sensitive environments.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Jul 27, 2026, 06:55 AM
Package URL
pkg:socket/skills-sh/code-yeongyu%2Foh-my-openagent%2Freview-work%2F@34ffb588361f3f3a636b5b38af7c14eec4a56ae1ccdd91aee372a7899c8a47bd
Security Audit — socket — review-work