skills/n0an/vivadicta/pr/Socket

pr

Warn

Audited by Socket on Sep 11, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core GitHub PR and review workflow is coherent and uses official GitHub tooling/endpoints, so this is not malware. Risk comes from autonomous public actions, processing untrusted review content while able to edit/merge, and the extra hard-coded local vault write that exceeds a narrow PR skill’s scope.

Confidence: 89%Severity: 53%

Audit Metadata

Analyzed At

Sep 11, 2026, 01:54 AM

Package URL

pkg:socket/skills-sh/n0an%2Fvivadicta%2Fpr%2F@2d3167785216f8a11ec41d8eefc3606328a33aca708789e90200df7829fec8da