worker

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose matches the capabilities, but the skill is high-impact because it autonomously consumes untrusted ticket content, executes coding/test actions, and creates pull requests. The main risks are autonomy abuse and indirect prompt injection rather than clear malware or credential theft.

Confidence: 82%Severity: 74%
Audit Metadata
Analyzed At
Apr 9, 2026, 08:03 AM
Package URL
pkg:socket/skills-sh/JubaKitiashvili%2Feverything-react-native-expo%2Fworker%2F@6b53f7989d829cf11d6030a169322f36a6e55f81