muse-review

Warn

Audited by Socket on Oct 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose matches external code review, but the skill requires an unverified orchestration CLI and routes local code/context through multiple third-party layers. The main issue is disproportionate trust and under-specified data flow, not confirmed malware.

Confidence: 84%Severity: 75%
Audit Metadata
Analyzed At
Oct 19, 2026, 11:10 PM
Package URL
pkg:socket/skills-sh/davidondrej%2Fskills%2Fmuse-review%2F@e8e00559566dd53e2c21167cee7b99a93f09867558b95a6b184ccef552036efe