om-auto-implement-issue

Warn

Audited by Socket on Jul 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated purpose matches its git/tracker automation, so it is not fundamentally deceptive, but it has a medium-risk footprint. The main concerns are transitive trust in repo-local/other om-* skills and prompt-injection exposure from untrusted repo/tracker content combined with write/exec capabilities.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Jul 18, 2026, 06:00 AM
Package URL
pkg:socket/skills-sh/open-mercato%2Fskills%2Fom-auto-implement-issue%2F@c13d52c5f9a79bb2187659f328530b4a1f88e4d7fd184a498081bcce40381146
Security Audit — socket — om-auto-implement-issue