skills/richardbray/skills/delegate-review/Socket

delegate-review

Warn

Audited by Socket on Jul 8, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s review purpose broadly matches its capabilities, but it forwards repository diffs and local guidance to external model harnesses and depends on another skill for routing behavior. Main concerns are transitive skill trust, unverified external couriers beyond codex, and prompt-injection exposure from untrusted PR content rather than confirmed malware.

Confidence: 83%Severity: 58%

Audit Metadata

Analyzed At

Jul 8, 2026, 07:14 PM

Package URL

pkg:socket/skills-sh/RichardBray%2Fskills%2Fdelegate-review%2F@1e1cf38e554fcc8b2a8505663803b3f47b54a26dc46a136e5ec47932a1044764