github

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated GitHub-management purpose is plausible, but the skill routes GitHub access and actions through a third-party Orthogonal integration and an insufficiently documented external CLI. The main concern is not the GitHub functionality itself, but credential forwarding and opaque execution trust that are broader than necessary for the stated purpose.

Confidence: 84%Severity: 82%
Audit Metadata
Analyzed At
Mar 29, 2026, 05:59 PM
Package URL
pkg:socket/skills-sh/orthogonal-sh%2Fskills%2Fgithub%2F@e06424a99f8c0b4dfa85a3978b4f1a57d05888f5