security-reviewer

Warn

Audited by Socket on Jul 7, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Purpose and capabilities are mostly aligned for a security-audit skill, and the referenced tools appear to be legitimate security utilities. The main risk is that this skill enables an AI agent to perform offensive security actions with Bash against real targets and to process untrusted content while able to execute commands; this makes it high-risk but not malicious.

Confidence: 89%Severity: 78%
Audit Metadata
Analyzed At
Jul 7, 2026, 01:30 AM
Package URL
pkg:socket/skills-sh/neonetz%2Fopencode-skills%2Fsecurity-reviewer%2F@0f17b45f696021192574916a4b34064462a40f87a575980d61214daf05370356