morning-pr-review

Warn

Audited by Socket on Oct 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s purpose mostly matches its repo/PR/ticket-reading behavior, but its core delivery path relies on an unverifiable `screenless` CLI and it performs autonomous outbound email/call scheduling. That makes the workflow high-risk as an AI-agent skill even without clear evidence of intentional malware.

Confidence: 84%Severity: 81%
Audit Metadata
Analyzed At
Oct 15, 2026, 01:48 PM
Package URL
pkg:socket/skills-sh/janwilmake%2Fscreenless%2Fmorning-pr-review%2F@4ded16669b386c0331d52fbeef3e8072424977a8af8107de9cfd3dceee28da7f