skills/l3digital-net/claude-code-plugins/repo-manager/Socket

repo-manager

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The stated purpose and requested GitHub PAT broadly match a repo-management skill, and the approval model is well scoped. The main risk is trust: the skill relies on unseen local installer/helper code and forwards GitHub credentials into that helper, so provenance, install hygiene, and actual network/data flows cannot be verified from the supplied material.

Confidence: 86%Severity: 80%

Audit Metadata

Analyzed At

Mar 18, 2026, 01:38 PM

Package URL

pkg:socket/skills-sh/l3digital-net%2Fclaude-code-plugins%2Frepo-manager%2F@96ec4b52640b865b225bae140e7187454177930d