cmd-fix-pr-review

Warn

Audited by Socket on Apr 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is coherent for PR review remediation and uses official Git/GitHub tooling, but its autonomous push/resolve behavior is disproportionate because it performs remote repository actions without approval and processes untrusted review content while retaining write/exec authority.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Apr 27, 2026, 07:43 AM
Package URL
pkg:socket/skills-sh/gsmlg-dev%2Fcode-agent%2Fcmd-fix-pr-review%2F@4ab53d0e1f389a13f36b24a55b8ffc687e659783
Security Audit — socket — cmd-fix-pr-review