gh-code-scanning

Pass

Audited by Socket on Oct 6, 2026

Checks
Malicious behaviorInjection, exfiltration, untrusted installs
Security concernsCredential exposure, tool/trust exploitation
Code obfuscationHidden or obfuscated code
Suspicious patternsReconnaissance, excessive autonomy, resource use
Audit Metadata
Analyzed At
Oct 6, 2026, 11:33 AM
Package URL
pkg:socket/skills-sh/microsoft%2Fhve-core%2Fgh-code-scanning%2F@667362e5c1db36444f5d060853aa2c78c3347a69516dc40672f03d63ea5bfec2