skills/docker/docs/check-pr/Socket

check-pr

Warn

Audited by Socket on May 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

BENIGN in intent but HIGH-RISK operationally: the skill is coherent and uses official GitHub tooling/endpoints, yet it grants an agent the ability to act on untrusted PR content by editing code, pushing commits, and posting public GitHub actions without explicit per-action approval.

Confidence: 89%Severity: 78%

Audit Metadata

Analyzed At

May 15, 2026, 04:27 AM

Package URL

pkg:socket/skills-sh/docker%2Fdocs%2Fcheck-pr%2F@a874fe7322df95a353eed77574ceffc258176eac