heyeddi-pr-respond
Warn
Audited by Socket on Oct 28, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s purpose matches PR review response work and its main network path is GitHub via official gh CLI, but it is high-risk because it authorizes autonomous code changes, commits, pushes, and public thread replies without asking. Additional trust is delegated to another skill and several unspecified local helper tools, so the footprint is coherent but overly permissive.
Confidence: 88%Severity: 74%
Audit Metadata