skills/pskoett/pskoett-ai-skills/learning-aggregator-ci/Socket

learning-aggregator-ci

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's read/aggregate/post behavior is coherent with its stated CI reporting purpose, and data flows stay within expected GitHub channels. Main concerns are transitive skill installation and unpinned installer/tooling trust, plus mild provenance ambiguity around the publisher repo name; these make it medium-risk rather than malicious.

Confidence: 86%Severity: 56%

Audit Metadata

Analyzed At

Sep 16, 2026, 08:42 AM

Package URL

pkg:socket/skills-sh/pskoett%2Fpskoett-ai-skills%2Flearning-aggregator-ci%2F@8b29f139378b3ae7638849326a2bedc6d235b52c9fe7faaf82e385db2f3e3913