review

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core review purpose is coherent, but the skill is higher risk than a normal documentation skill because it can autonomously modify and stage code, processes untrusted external/repo text, and delegates to helper tools whose provenance is not established here.

Confidence: 87%Severity: 66%
Audit Metadata
Analyzed At
Jul 15, 2026, 12:56 PM
Package URL
pkg:socket/skills-sh/Lua2147%2Fclaude-toolkit-catalog%2Freview%2F@6d2ec97969b12086089b16d99f4acd36331725503575443a4f1fc76fbd2b1558
Security Audit — socket — review