fix-review
Warn
Audited by Socket on May 6, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The core skill purpose is coherent and mostly benign for remediation review, but it introduces moderate risk by allowing external content retrieval with Bash/Write access and by referencing an unofficial third-party `gdrive` CLI for Google Drive fallback. No direct malware or exfiltration behavior is shown in the provided text, but the unverifiable third-party Drive tooling and incomplete credential/data-flow visibility raise the overall risk above benign.
Confidence: 81%Severity: 72%
Audit Metadata