remedy
Warn
Audited by Socket on Sep 8, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is internally coherent for 'remedy PR feedback without commenting' and uses official GitHub tooling with no remote installer or credential-forwarding red flags. The main risk is scope: it empowers the agent to autonomously modify code, push commits, and silently resolve review threads, which is high-impact and can reduce human visibility even though it matches the stated workflow.
Confidence: 89%Severity: 56%
Audit Metadata