resolve-pr-parallel

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the GitHub CLI usage and data flow are consistent with a PR-review automation skill, but the scope is high-risk because it authorizes autonomous multi-agent code changes, git push, and public PR replies based on untrusted reviewer content. No clear malware or credential-harvesting behavior is shown, but the action authority is broader than a low-risk helper skill.

Confidence: 88%Severity: 62%
Audit Metadata
Analyzed At
Mar 29, 2026, 07:10 AM
Package URL
pkg:socket/skills-sh/somtougeh%2Fdotfiles%2Fresolve-pr-parallel%2F@3c68f719f53956c4b719de96ce328145a2c6af5b
Security Audit — socket — resolve-pr-parallel