skills/onmax/skills/pr-evidence/Socket

pr-evidence

Warn

Audited by Socket on Jul 25, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s core purpose is coherent, but its artifact flow relies on a third-party uploader/hosting path whose exact CLI provenance is not clearly verifiable from the provided evidence. The main risk is supply-chain trust and public artifact exposure, not confirmed malware or credential theft.

Confidence: 83%Severity: 78%

Audit Metadata

Analyzed At

Jul 25, 2026, 12:53 AM

Package URL

pkg:socket/skills-sh/onmax%2Fskills%2Fpr-evidence%2F@4b40b9c46f021fd82940228394bcdb78d749c72aa2473e2dd9bfa6de2f1f8010