issue-coordinator

Warn

Audited by Socket on Aug 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly aligned with repository issue coordination, but it grants scaled autonomous coding and optional merging based on untrusted GitHub content. No obvious credential theft or off-platform exfiltration appears, yet the combination of issue/PR ingestion plus write/merge authority creates meaningful operational risk.

Confidence: 87%Severity: 60%
Audit Metadata
Analyzed At
Aug 14, 2026, 04:22 PM
Package URL
pkg:socket/skills-sh/owainlewis%2Fblueprint%2Fissue-coordinator%2F@28704b4d9f78dd226c62d4130b9041bd4e03b81b2c3669c754e96c4aabaf6973
Security Audit — socket — issue-coordinator