skills/sickn33/agentic-awesome-skills/gh-image/Socket

gh-image

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s stated purpose is coherent, and its data appears intended for GitHub, but it installs a community extension from a personal repo and forwards a full-account GitHub session credential to that third-party tool. That combination makes the skill high risk even without proof of malicious exfiltration.

Confidence: 91%Severity: 86%

Audit Metadata

Analyzed At

Sep 15, 2026, 12:48 PM

Package URL

pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Fgh-image%2F@e068df80719bc3ec9debb9f170302fbc3b1257d1be5c8fa3401cff86de0feb65