skills/maddhruv/absolute/code-review-mastery/Socket

code-review-mastery

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core local code-review behavior is coherent and low risk, but the companion-check/install feature is not proportionate to the stated purpose. It introduces transitive skill installation and unpinned external execution from a third-party target, raising medium security risk without clear need for the review workflow.

Confidence: 89%Severity: 62%

Audit Metadata

Analyzed At

Mar 23, 2026, 01:04 PM

Package URL

pkg:socket/skills-sh/AbsolutelySkilled%2FAbsolutelySkilled%2Fcode-review-mastery%2F@166981dc8567a1982fb7d0026d3413ffbed1c58b