skills/sickn33/agentic-awesome-skills/codex-review/Socket

codex-review

Warn

Audited by Socket on Aug 11, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is plausible, but this snippet mostly instructs the agent to install a separate community skill whose actual instructions, permissions, and data flows are not visible. The main risk is transitive trust and unpinned remote skill installation, not confirmed malware.

Confidence: 84%Severity: 72%

Audit Metadata

Analyzed At

Aug 11, 2026, 04:45 PM

Package URL

pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Fcodex-review%2F@a225704ba13d086e086dcb15b6e0c40852fc7679bcef5470dcd961beecf463b1