skills/soia-team/soia-open-skills/soia-dev-github-ops/Socket

soia-dev-github-ops

Warn

Audited by Socket on Jul 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS due to transitive skill installation and unverified publisher trust, but the runtime behavior is largely coherent with a GitHub-ops skill and routes data to official GitHub endpoints. Main risk is supply-chain and permission breadth, not confirmed malicious behavior.

Confidence: 85%Severity: 64%

Audit Metadata

Analyzed At

Jul 21, 2026, 10:19 AM

Package URL

pkg:socket/skills-sh/soia-team%2Fsoia-open-skills%2Fsoia-dev-github-ops%2F@dd0e9eba046239dd14b71ab50758d9c2e8d8efe03bea84eeeec6dce4fbf4254d