btx

Warn

Audited by Socket on Apr 25, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The stated purpose is coherent: fetch repositories and inspect their source. The main concern is trust in the undocumented `btx` binary itself; because the skill depends on an unverifiable external CLI with no provenance or install path, overall risk is elevated even without clear malicious behavior. The repo-reading workflow also exposes the agent to untrusted external content, but the documented scope is otherwise read-focused and proportionate.

Confidence: 82%Severity: 78%
Audit Metadata
Analyzed At
Apr 25, 2026, 10:55 PM
Package URL
pkg:socket/skills-sh/praveenperera%2Fdotfiles%2Fbtx%2F@3a31c2bb61f736c98c59116ac57d0128bcd69382