security-reviewer

Warn

Audited by Socket on Jul 7, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Purpose and capabilities are mostly aligned for a security-audit skill, and the referenced tools appear to be legitimate security utilities. The main risk is that this skill enables an AI agent to perform offensive security actions with Bash against real targets and to process untrusted content while able to execute commands; this makes it high-risk but not malicious.

Confidence: 89%Severity: 78%
Audit Metadata
Analyzed At
Jul 7, 2026, 01:30 AM
Package URL
pkg:socket/skills-sh/neonetz%2Fopencode-skills%2Fsecurity-reviewer%2F@0f17b45f696021192574916a4b34064462a40f87a575980d61214daf05370356
Security Audit — socket — security-reviewer