morning-pr-review
Warn
Audited by Socket on Oct 15, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s purpose mostly matches its repo/PR/ticket-reading behavior, but its core delivery path relies on an unverifiable `screenless` CLI and it performs autonomous outbound email/call scheduling. That makes the workflow high-risk as an AI-agent skill even without clear evidence of intentional malware.
Confidence: 84%Severity: 81%
Audit Metadata