flux-opencode-epic-review
Warn
Audited by Socket on Jul 31, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated review purpose is coherent, but the skill’s trust model depends on an unverifiable repo-bundled executable and it authorizes autonomous fix-and-commit behavior. Main concern is supply-chain opacity and hidden data flow through `fluxctl`, not confirmed malware.
Confidence: 84%Severity: 82%
Audit Metadata