skills/dimitrigilbert/ai-skills/gh-profile/Socket

gh-profile

Warn

Audited by Socket on Oct 12, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose is coherent and mostly documentation-focused, but it normalizes broad use of third-party hosted widgets and unpinned third-party GitHub Actions. The biggest issues are mutable action refs and forwarding repository/API secrets to third-party code; this is medium risk rather than confirmed malware.

Confidence: 90%Severity: 58%

Audit Metadata

Analyzed At

Oct 12, 2026, 04:19 PM

Package URL

pkg:socket/skills-sh/dimitrigilbert%2Fai-skills%2Fgh-profile%2F@2f758ce7f92cdc1f7a0275128b9ee3e6cd53340882d83c0f5a3b1673b58a35fe