apply-turbo-handoffs

Warn

Audited by Socket on Oct 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core repo-audit/edit purpose is coherent, but the skill delegates to other skills and can make remote changes by committing, pushing, and updating installed skills. The main risk is transitive trust and real-world action scope, not clear credential theft or hidden exfiltration.

Confidence: 79%Severity: 58%
Audit Metadata
Analyzed At
Oct 3, 2026, 09:04 PM
Package URL
pkg:socket/skills-sh/tobihagemann%2Fturbo%2Fapply-turbo-handoffs%2F@7393a8b422759fa32c2198a0801598b5b95a12b45a0d964bf5121262ec57f036