merge-dependabot-prs

Pass

Audited by Socket on Oct 27, 2026

Checks
Malicious behaviorInjection, exfiltration, untrusted installs
Security concernsCredential exposure, tool/trust exploitation
Code obfuscationHidden or obfuscated code
Suspicious patternsReconnaissance, excessive autonomy, resource use
Audit Metadata
Analyzed At
Oct 27, 2026, 08:39 PM
Package URL
pkg:socket/skills-sh/onyx-dot-app%2Fonyx%2Fmerge-dependabot-prs%2F@206700bad753f3630a3382f1a560e72800be091406d28c6766e6ded1f3aa9830