skills/rezkam/boring-but-good/pr-ready/Socket

pr-ready

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The visible instructions are coherent for a PR-readiness skill and do not clearly instruct stealth, but the skill requires unreviewed local executables that determine behavior, and it enables autonomous GitHub-side actions including pushes and PR updates. Main concern is unverifiable helper-script trust rather than confirmed malicious intent.

Confidence: 84%Severity: 72%

Audit Metadata

Analyzed At

Sep 17, 2026, 03:52 AM

Package URL

pkg:socket/skills-sh/rezkam%2Fboring-but-good%2Fpr-ready%2F@4315938405e8a86dfdaffa56b58c85ee7101bbe0e9b63e2096c95b69b4ec9a7c