skills/maxmiksa/auto-company/github-explorer/Socket

github-explorer

Warn

Audited by Socket on Jul 26, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the actual footprint expands beyond simple GitHub analysis by executing third-party dependent skill scripts and routing data through multiple external providers. The main concern is transitive trust and supply-chain risk from unverifiable community skills, not confirmed malware.

Confidence: 82%Severity: 72%

Audit Metadata

Analyzed At

Jul 26, 2026, 04:43 PM

Package URL

pkg:socket/skills-sh/MaxMiksa%2FAuto-Company%2Fgithub-explorer%2F@25c06d25697a64b7a96f8686cab7acab662fbaf7dd40bfe5aaae472085429ebe