skills/donchitos/claude-code-game-studios/bug-report/Socket

bug-report

Warn

Audited by Socket on Sep 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the functional scope mostly matches a bug-report workflow, and there is no evident credential theft, external exfiltration, or third-party install path. However, the skill contains a load-time pre-execution Bash command that invokes an unseen local helper script, creating meaningful trust and review bypass risk even though the visible command looks configuration-related.

Confidence: 90%Severity: 62%

Audit Metadata

Analyzed At

Sep 30, 2026, 06:51 PM

Package URL

pkg:socket/skills-sh/donchitos%2Fclaude-code-game-studios%2Fbug-report%2F@d014863c090961e06acee3e5f2ab5b0593813efb5c30423d743185f9e3b9c839