to-tickets

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core behavior is coherent for a ticket-filing skill and its network destinations are official GitHub/GitLab paths, but the instruction to run setup-krit-skills introduces an unverifiable external dependency unrelated to the otherwise straightforward workflow. Without that command, this would be low-to-moderate risk and largely benign.

Confidence: 85%Severity: 72%
Audit Metadata
Analyzed At
Sep 12, 2026, 06:21 AM
Package URL
pkg:socket/skills-sh/krit03w%2Fkrit-engineer-skills%2Fto-tickets%2F@49456eed45a4b918ae995b99b67f0071c8f41432f5aa20b4fcf942a799604a98
Security Audit — socket — to-tickets