skills/obra/muse-skills/github/Socket

github

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the workflow is coherent for GitHub repository access, but the skill overstates its tie to GitHub's official tooling and relies on an opaque Muse-specific `github` CLI with unverified provenance and hidden credential/data handling. The main concern is install/execution trust and intermediary control, not confirmed malware.

Confidence: 84%Severity: 76%

Audit Metadata

Analyzed At

Oct 8, 2026, 11:46 PM

Package URL

pkg:socket/skills-sh/obra%2Fmuse-skills%2Fgithub%2F@369788447f08847690525fca0fe4a89263f10bd3cc3ca963768320a26bc5400e