community-health
Warn
Audited by Socket on Mar 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s purpose and capabilities are largely aligned with GitHub community-health maintenance, but it relies on a non-official third-party CLI that likely handles GitHub credentials and performs write actions. The main concern is install/execution trust and credential forwarding to `gh-manager`, not obvious malicious exfiltration.
Confidence: 84%Severity: 68%
Audit Metadata