discussions

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose is coherent and scoped to GitHub Discussions, and its approval gates reduce abuse risk, but it relies on an unofficial third-party CLI with unclear installation/provenance in the skill itself. This is mainly a supply-chain and credential-forwarding concern rather than clear malicious behavior.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Mar 18, 2026, 01:37 PM
Package URL
pkg:socket/skills-sh/l3digital-net%2Fclaude-code-plugins%2Fdiscussions%2F@2b2ab64114b6d757bb470a59e4ec919b0f52f38e