org-ci-health

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated CI-audit purpose is coherent with GitHub/workflow inspection and optional PR fixes, but the skill's core functionality relies on an opaque local helper script with no provenance or verifiable source. No explicit malicious exfiltration or third-party credential routing is shown, yet the unverifiable script creates a high trust gap for a skill that may use GitHub credentials and act across many repos.

Confidence: 85%Severity: 78%
Audit Metadata
Analyzed At
Oct 8, 2026, 09:36 PM
Package URL
pkg:socket/skills-sh/seabbs%2Fskills%2Forg-ci-health%2F@7d7a4a6a4afbcb2b2a2d7c79e093d8f59b805ead243fbc6d59b0aaa67a24882c