plan-pipeline
Warn
Audited by Socket on Oct 12, 2026
1 alert found:
SecuritySecurityexecute/SKILL.md
MEDIUMSecurityMEDIUM
execute/SKILL.md
SUSPICIOUS: the skill is internally coherent for CI-style implementation automation and uses official Git/GitHub tooling, with no third-party installer or credential-forwarding behavior. The main risk is high autonomy: it can modify code, push, open PRs, merge, and delete branches with limited human checkpoints, so it is risky but not malicious.
Confidence: 92%Severity: 76%
Audit Metadata