skills/microsoft/powerplatform-build-tools/review/Socket

review

Warn

Audited by Socket on Jul 10, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

The skill is purpose-aligned and uses official GitHub/NuGet endpoints, so it is not malicious. However, it is a medium-high risk automation skill because it processes untrusted PR content and can publicly approve, request changes, and post comments without explicit user confirmation, with added transitive trust in `/knowledge-sync`.

Confidence: 86%Severity: 72%

Audit Metadata

Analyzed At

Jul 10, 2026, 02:59 PM

Package URL

pkg:socket/skills-sh/microsoft%2Fpowerplatform-build-tools%2Freview%2F@019972910ab3765c03992f43b9439cccf3289c204211243b483aef57dcaa9fe9