skills/open-mercato/skills/om-pr-autopilot/Socket

om-pr-autopilot

Warn

Audited by Socket on Aug 11, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose matches a PR orchestration skill, and no direct malware or exfiltration pattern is visible. The main risks are transitive trust in unspecified om-* companion skills and autonomous repository actions, including optional merging, without mandatory per-step confirmation.

Confidence: 84%Severity: 61%

Audit Metadata

Analyzed At

Aug 11, 2026, 08:14 PM

Package URL

pkg:socket/skills-sh/open-mercato%2Fskills%2Fom-pr-autopilot%2F@adffa7f49fecfa71d48e47c781d76cd2d4033784b9710cb5cb49f02db65d3b29