community-health

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose and capabilities are largely aligned with GitHub community-health maintenance, but it relies on a non-official third-party CLI that likely handles GitHub credentials and performs write actions. The main concern is install/execution trust and credential forwarding to `gh-manager`, not obvious malicious exfiltration.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
Mar 18, 2026, 01:38 PM
Package URL
pkg:socket/skills-sh/l3digital-net%2Fclaude-code-plugins%2Fcommunity-health%2F@3a5cc7d0527e208011b15ee791eab289e3ebc491
Security Audit — socket — community-health