flux-opencode-impl-review
Warn
Audited by Socket on Jul 31, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose matches code-review coordination, but the skill’s footprint depends on an unverifiable bundled executable and uses eval on that tool’s output. That makes the install/execution trust materially risky even though the overall behavior is broadly consistent with the claimed review workflow.
Confidence: 85%Severity: 82%
Audit Metadata