algal-ci
Warn
Audited by Socket on Sep 19, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the claimed CI-watch purpose is plausible and the GitHub data flow is proportionate, but the skill's core behavior depends on executing an unverified `algal-skills` package through unpinned `bunx`. That makes the install/execution trust disproportionate to the simple task and elevates risk despite otherwise coherent functionality.
Confidence: 87%Severity: 82%
Audit Metadata