worker
Warn
Audited by Socket on Apr 9, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose matches the capabilities, but the skill is high-impact because it autonomously consumes untrusted ticket content, executes coding/test actions, and creates pull requests. The main risks are autonomy abuse and indirect prompt injection rather than clear malware or credential theft.
Confidence: 82%Severity: 74%
Audit Metadata