skills/pskoett/pskoett-ai-skills/simplify-and-harden-ci/Socket

simplify-and-harden-ci

Warn

Audited by Socket on Jun 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s capabilities largely match its CI review purpose, and data flows stay within GitHub/CI review patterns. The main concerns are install-trust issues: a publisher/repo naming inconsistency, a mutable `@main` action reference, and third-party skill installation trust. No clear credential harvesting, secret exfiltration, or purpose-incompatible behavior is present.

Confidence: 83%Severity: 52%

Audit Metadata

Analyzed At

Jun 30, 2026, 07:01 AM

Package URL

pkg:socket/skills-sh/pskoett%2Fpskoett-skills%2Fsimplify-and-harden-ci%2F@cd731fb9157d89f442703d1ee129183c27769a7f7e1f51e5c5935e1e9bc77b40