route-github-agent-checks

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent as a router for paid GitHub decision checks, but it grants an agent the ability to make external wallet-backed purchases and routes GitHub-derived data through third-party services. The main concerns are autonomous financial action, third-party decision gating, and prompt-injection exposure from untrusted public content rather than confirmed malware.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Jul 20, 2026, 01:52 PM
Package URL
pkg:socket/skills-sh/cristianmoroaica%2Fbountyverdict%2Froute-github-agent-checks%2F@050e00db94bdece7c20c29410b2ae9bd9f1c446588aedb5f3104945f7aff30d6
Security Audit — socket — route-github-agent-checks