heyeddi-pr-respond

Warn

Audited by Socket on Oct 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose matches PR review response work and its main network path is GitHub via official gh CLI, but it is high-risk because it authorizes autonomous code changes, commits, pushes, and public thread replies without asking. Additional trust is delegated to another skill and several unspecified local helper tools, so the footprint is coherent but overly permissive.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Oct 28, 2026, 09:36 PM
Package URL
pkg:socket/skills-sh/heyeddi-com%2Fheyeddi-ci-skills%2Fheyeddi-pr-respond%2F@15c893bfff9f00ffa682e04ee7f4c9ff38a54ce8c746e2b6a96b07212d91bb8e