skills/razbakov/skills/developing-tickets/Socket

developing-tickets

Warn

Audited by Socket on Jun 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the workflow is broadly consistent with a ticket-development skill, but it relies on opaque sub-skills and unspecified credential/data routing. The main concerns are transitive trust, moderate prompt-injection exposure from external issue content, and lack of verification that tracker access stays within official Jira/GitHub APIs.

Confidence: 82%Severity: 54%

Audit Metadata

Analyzed At

Jun 23, 2026, 04:34 PM

Package URL

pkg:socket/skills-sh/razbakov%2Fskills%2Fdeveloping-tickets%2F@7dea7162cd8a318a8e3425caefd89ce7cb262bf15ffff032f01122d8d4f08203