flux-opencode-epic-review

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated review purpose is coherent, but the skill’s trust model depends on an unverifiable repo-bundled executable and it authorizes autonomous fix-and-commit behavior. Main concern is supply-chain opacity and hidden data flow through `fluxctl`, not confirmed malware.

Confidence: 84%Severity: 82%
Audit Metadata
Analyzed At
Jul 31, 2026, 05:22 AM
Package URL
pkg:socket/skills-sh/Nairon-AI%2Fflux-opencode%2Fflux-opencode-epic-review%2F@2c51962bdafd5ee654aefa46b76c17558e3e78090e89562b73475803a2eda14a