fix-review

Warn

Audited by Socket on May 6, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The core skill purpose is coherent and mostly benign for remediation review, but it introduces moderate risk by allowing external content retrieval with Bash/Write access and by referencing an unofficial third-party `gdrive` CLI for Google Drive fallback. No direct malware or exfiltration behavior is shown in the provided text, but the unverifiable third-party Drive tooling and incomplete credential/data-flow visibility raise the overall risk above benign.

Confidence: 81%Severity: 72%
Audit Metadata
Analyzed At
May 6, 2026, 02:10 PM
Package URL
pkg:socket/skills-sh/jswortz%2Fmy-skills%2Ffix-review%2F@6de564bf306d229ff7169f5ffcb679b8cad48b93
Security Audit — socket — fix-review