skills/neolabhq/context-engineering-kit/code-review:review-pr/Socket

code-review:review-pr

Warn

Audited by Socket on Mar 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s core purpose is coherent, and its GitHub data flow is to official endpoints, not a proxy. The main risk is not malware but autonomous action: it can post review comments and modify PR descriptions after processing untrusted PR content with parallel agents, creating medium-high operational risk for an AI agent.

Confidence: 90%Severity: 61%

Audit Metadata

Analyzed At

Mar 22, 2026, 03:53 AM

Package URL

pkg:socket/skills-sh/neolabhq%2Fcontext-engineering-kit%2Fcode-reviewreview-pr%2F@df80160c5e87fcb1cb97b57ec1744159c1c50bbc