skills/seaworld008/commonly-used-high-value-skills/github/Socket

github

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s GitHub automation capabilities broadly fit its stated purpose, and its main API path is the official GitHub CLI. However, risk is elevated by the unrelated unpinned `clawhub` installer, explicit fallback to extracting raw `gh` tokens for automation, transitive reliance on another skill, and support for autonomous high-impact repo actions like merge/release/permission maintenance.

Confidence: 87%Severity: 61%

Audit Metadata

Analyzed At

Aug 18, 2026, 12:26 PM

Package URL

pkg:socket/skills-sh/seaworld008%2Fcommonly-used-high-value-skills%2Fgithub%2F@251ba07b6bf336901d9d1ba9aefabe0cd0df8313463ff792962aa950d0538683