handle-tickets
Warn
Audited by Socket on Aug 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s purpose is coherent, but its operational footprint is broad. The main risks are autonomous real-world PR actions, transitive trust in unverified downstream skills, and prompt-injection exposure from external ticket/PR content while code-editing workers are active. No direct malware, secret theft, or remote installer is shown in this file.
Confidence: 83%Severity: 58%
Audit Metadata