skills/te-quanbzhang/skills-pool/codekb-review/Socket

codekb-review

Warn

Audited by Socket on Aug 28, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s review/edit capabilities align with its stated purpose and file scope is proportionate, but the required CodeKB CLI/MCP dependency is not sufficiently verifiable from the provided evidence, and the MCP data path is undisclosed. Main risk is install/provenance and opaque backend routing, not confirmed malware.

Confidence: 86%Severity: 74%

Audit Metadata

Analyzed At

Aug 28, 2026, 03:54 AM

Package URL

pkg:socket/skills-sh/te-quanbzhang%2Fskills-pool%2Fcodekb-review%2F@20ab1e1e2feae7853e2519bf46357d73e2c7c421563a38c66a2e20be668441da