opsx-jira-fix-queue
Warn
Audited by Socket on Sep 6, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS due to transitive trust: the skill’s stated purpose is coherent, but it depends on installing another skill from a personal GitHub repo through `npx skills add` with no pinning or verification. There is no clear credential theft or exfiltration in this shell, so this is not confirmed malware; the main risk is unreviewed downstream skill installation and execution.
Confidence: 89%Severity: 58%
Audit Metadata