skills/fellowship-dev/dogfooded-skills/agent-readiness/Socket

agent-readiness

Warn

Audited by Socket on Jul 27, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is broadly coherent with a repository-readiness assessment workflow, but it has meaningful risk from running untrusted repo install/test commands, brokering GitHub access through a gateway, and autonomously writing GitHub issues. The main concern is dangerous execution scope and intermediary credential/data flow, not clear malicious intent.

Confidence: 82%Severity: 68%

Audit Metadata

Analyzed At

Jul 27, 2026, 03:03 AM

Package URL

pkg:socket/skills-sh/fellowship-dev%2Fdogfooded-skills%2Fagent-readiness%2F@767e6508e2f287dd8519a7290b1d8a0459c267e3043d9679545c33cdda3107cf