skills/mjkimr/weekly-report/weekly-report-repos/Socket

weekly-report-repos

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s purpose is coherent and it does not request disproportionate credentials or exfiltrate data, but it relies on executing a remotely fetched CLI from a personal GitHub repository via `uvx`. That unverifiable execution path makes the overall risk high despite otherwise narrow functionality.

Confidence: 84%Severity: 72%

Audit Metadata

Analyzed At

Jul 30, 2026, 11:31 PM

Package URL

pkg:socket/skills-sh/mjkimR%2Fweekly-report%2Fweekly-report-repos%2F@e6005c2337c99c44a2a8a73f96a8172b8a6c0b91c204eb537adbef5dc4304fd8