org-ci-health
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated CI-audit purpose is coherent with GitHub/workflow inspection and optional PR fixes, but the skill's core functionality relies on an opaque local helper script with no provenance or verifiable source. No explicit malicious exfiltration or third-party credential routing is shown, yet the unverifiable script creates a high trust gap for a skill that may use GitHub credentials and act across many repos.
Confidence: 85%Severity: 78%
Audit Metadata