skills/patinaproject/skills/develop-issue/Socket

develop-issue

Warn

Audited by Socket on May 26, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the workflow purpose is coherent, but it materially expands trust by instructing installation of multiple external child skills via a mutable CLI/version path and default-branch references. This is more a transitive supply-chain and prompt-surface risk than confirmed malicious behavior.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

May 26, 2026, 11:17 AM

Package URL

pkg:socket/skills-sh/patinaproject%2Fskills%2Fdevelop-issue%2F@64f7ff98652a255d8684a62ac79c14bbdc2b9521