skills/nairon-ai/agentic-starter-pack/pr-walkthrough/Socket

pr-walkthrough

Warn

Audited by Socket on Jul 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core PR-walkthrough behavior is mostly aligned and largely local, with a pinned official D3 runtime and no obvious credential theft. Risk rises from transitive use of another skill, ingestion of untrusted PR/comment content while generating active HTML/JS, and optional unpinned Wrangler-based public deployment that can expose private review context.

Confidence: 84%Severity: 57%

Audit Metadata

Analyzed At

Jul 21, 2026, 03:40 PM

Package URL

pkg:socket/skills-sh/Nairon-AI%2Fagentic-starter-pack%2Fpr-walkthrough%2F@61ed00496ba639203402ca85db551e021cfe6a5c421980b25fa7da362d0eb500