skills/melodic-software/claude-code-plugins/tidy/Socket

tidy

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill’s purpose and core capabilities mostly align with repository tidying, and its pre-execution commands are benign local context reads. The main risk comes from autonomous repo-side effects and transitive trust in other plugins/skills that can create issues and PRs on the user’s behalf without strong per-action confirmation.

Confidence: 88%Severity: 62%

Audit Metadata

Analyzed At

Jul 30, 2026, 07:56 PM

Package URL

pkg:socket/skills-sh/melodic-software%2Fclaude-code-plugins%2Ftidy%2F@e260f1f22fd2b13629df7fe7e58a6cb2f5367dcec6e0b408839b1ed38e918e94