route-github-agent-checks
Warn
Audited by Socket on Jul 20, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill is internally coherent as a router for paid GitHub decision checks, but it grants an agent the ability to make external wallet-backed purchases and routes GitHub-derived data through third-party services. The main concerns are autonomous financial action, third-party decision gating, and prompt-injection exposure from untrusted public content rather than confirmed malware.
Confidence: 84%Severity: 74%
Audit Metadata