skills/matteocervelli/llms/pr-fix/Socket

pr-fix

Warn

Audited by Socket on Sep 2, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core PR-triage and fix capabilities mostly match the stated purpose, but the skill reads a local Forgejo token file and sends it to an unspecified API endpoint, and it relies on other skills for review/merge handoff. This is not confirmed malware, but the credential handling and transitive trust make the skill medium risk.

Confidence: 87%Severity: 61%

Audit Metadata

Analyzed At

Sep 2, 2026, 11:46 AM

Package URL

pkg:socket/skills-sh/matteocervelli%2Fllms%2Fpr-fix%2F@d4d6ce8e083971c43205103d2ad38120703cc9b88ca202c9754bce1fdd4d25b3