codex-review

Warn

Audited by Socket on Oct 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent for code review, but the installation model adds medium risk because it instructs transitive skill installation through a third-party CLI to an unpinned personal GitHub repository. No clear credential theft, exfiltration, or malicious payload is evident from the provided content.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Oct 15, 2026, 01:33 AM
Package URL
pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Fcodex-review%2F@83091c8ab65f633765c1b2c95f2e349a82c18c33dea5a64eed823546f3c9fcb5