opsx-jira-fix-queue

Warn

Audited by Socket on Sep 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS due to transitive trust: the skill’s stated purpose is coherent, but it depends on installing another skill from a personal GitHub repo through `npx skills add` with no pinning or verification. There is no clear credential theft or exfiltration in this shell, so this is not confirmed malware; the main risk is unreviewed downstream skill installation and execution.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Sep 6, 2026, 10:18 AM
Package URL
pkg:socket/skills-sh/fudesign2008%2Fopen-skills%2Fopsx-jira-fix-queue%2F@b16130692a4d819ed2570c11ba6a885904450949e3d3f311065ff2ed5fc6597d
Security Audit — socket — opsx-jira-fix-queue