skills/jgamaraalv/delivery-loop/review-panel/Socket

review-panel

Warn

Audited by Socket on Jul 4, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s review orchestration behavior matches its stated purpose and its direct data flows are mostly local or to official GitHub tooling, but it depends on unverified local subagents/plugin provenance and processes untrusted diff content with agent-dispatch capability, creating moderate supply-chain and prompt-injection risk.

Confidence: 86%Severity: 58%

Audit Metadata

Analyzed At

Jul 4, 2026, 02:09 PM

Package URL

pkg:socket/skills-sh/jgamaraalv%2Fdelivery-loop%2Freview-panel%2F@703b06ea6f33f00cb47e05294d536f97245d4be13f2d21929f8348d447c7a1f2