skills/kevinaimonster/skill-hub/code-review/Socket

code-review

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The main review behavior is coherent and locally scoped, with no credential or exfiltration flow. However, the embedded recommendation to install an external GitHub-hosted skill creates a transitive trust risk, and Bash permission is broader than the stated non-executing review purpose.

Confidence: 87%Severity: 58%

Audit Metadata

Analyzed At

Mar 18, 2026, 09:24 AM

Package URL

pkg:socket/skills-sh/kevinaimonster%2Fskill-hub%2Fcode-review%2F@19290e8b8f68c504bd697facc3c4ee8761616a0d