flux-opencode-impl-review

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose matches code-review coordination, but the skill’s footprint depends on an unverifiable bundled executable and uses eval on that tool’s output. That makes the install/execution trust materially risky even though the overall behavior is broadly consistent with the claimed review workflow.

Confidence: 85%Severity: 82%
Audit Metadata
Analyzed At
Jul 31, 2026, 05:22 AM
Package URL
pkg:socket/skills-sh/Nairon-AI%2Fflux-opencode%2Fflux-opencode-impl-review%2F@25f4c3ae77db2c9ba36a5d349a03237366f7b6630fd892c67834ca50f3825107