btx
Warn
Audited by Socket on Apr 25, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The stated purpose is coherent: fetch repositories and inspect their source. The main concern is trust in the undocumented `btx` binary itself; because the skill depends on an unverifiable external CLI with no provenance or install path, overall risk is elevated even without clear malicious behavior. The repo-reading workflow also exposes the agent to untrusted external content, but the documented scope is otherwise read-focused and proportionate.
Confidence: 82%Severity: 78%
Audit Metadata