skills/jasonkneen/openclicky/github-code-review/Socket

github-code-review

Warn

Audited by Socket on Jun 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core capability is coherent with GitHub PR review and uses official GitHub endpoints/tools, so there is no strong malware signal. Risk comes from raw credential-file scraping, autonomous posting/review actions, and reviewing untrusted PR content with local exec/file access.

Confidence: 89%Severity: 64%

Audit Metadata

Analyzed At

Jun 18, 2026, 02:31 PM

Package URL

pkg:socket/skills-sh/jasonkneen%2Fopenclicky%2Fgithub-code-review%2F@b95634ff5a46cfd68a1f0d2660c5c3d01bc6515ef6bccb0026a4fd675bc5f13c