shunk031-github-cgd-identity

Warn

Audited by Socket on Sep 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Mostly coherent GitHub-identity automation for one organization, with official GitHub CLI usage and no obvious third-party exfiltration. The main risk is the unverifiable local setup-gh-cgd bootstrap command plus raw token retrieval/forwarding, which elevates overall security risk even though the skill does not show confirmed malicious intent.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Sep 1, 2026, 04:08 AM
Package URL
pkg:socket/skills-sh/shunk031%2Fskills%2Fshunk031-github-cgd-identity%2F@7d1b288e7cd4340934ecec242a7deb36e25e2e146acec1effa6542006147e94f
Security Audit — socket — shunk031-github-cgd-identity