skills/fradser/dotclaude/review/Socket

review

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is mostly aligned with its review purpose and uses a same-org official CLI, but it delegates repository content and endpoint selection through external pi/pi-agent infrastructure and user-configured proxy endpoints. Risk is moderate due to third-party review data flow and transitive trust, not clear malicious intent.

Confidence: 81%Severity: 56%

Audit Metadata

Analyzed At

Aug 24, 2026, 06:58 PM

Package URL

pkg:socket/skills-sh/fradser%2Fdotclaude%2Freview%2F@61dddc7d0f8b40c4e67547db4a0a5a639d5ba00b2cffee71bd026255edb3e2ec