om-auto-implement-issue
Warn
Audited by Socket on Jul 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s stated purpose matches its git/tracker automation, so it is not fundamentally deceptive, but it has a medium-risk footprint. The main concerns are transitive trust in repo-local/other om-* skills and prompt-injection exposure from untrusted repo/tracker content combined with write/exec capabilities.
Confidence: 84%Severity: 58%
Audit Metadata