code-review-hardened
Warn
Audited by Socket on Apr 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s main capability fits its stated purpose, but it sends user code to external services and recommends full-repo scans through a separate `replit.app` host, which raises confidentiality and data-flow concerns. The included consent and secret-scanning guardrails are positive, but the external transmission footprint is still medium risk.
Confidence: 78%Severity: 56%
Audit Metadata