gpt-review

Warn

Audited by Socket on Oct 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's review purpose is coherent, but it materially relies on a third-party orchestration layer and external CLI that handle repository content and auth context. The main concern is credential/data routing through Cloudroom rather than direct official OpenAI API use, combined with direct-binary install trust.

Confidence: 88%Severity: 76%
Audit Metadata
Analyzed At
Oct 19, 2026, 11:11 PM
Package URL
pkg:socket/skills-sh/davidondrej%2Fskills%2Fgpt-review%2F@0b93ef9aace6177dbc617e71d449818e99971123ade1f708ee383c5ec1aedbd7