skills/significant-gravitas/autogpt/pr-polish/Socket

pr-polish

Warn

Audited by Socket on May 6, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

BENIGN with medium operational risk. The skill is internally consistent for PR orchestration and uses official GitHub APIs/CLI with no suspicious installs or exfiltration, but it grants an agent a fairly autonomous loop over untrusted review content that can drive code changes, pushes, and GitHub interactions through child skills.

Confidence: 88%Severity: 62%

Audit Metadata

Analyzed At

May 6, 2026, 03:30 PM

Package URL

pkg:socket/skills-sh/Significant-Gravitas%2FAutoGPT%2Fpr-polish%2F@94a593d5c780835f4cfc4cff2efc48f0d39165af