github-issue-writer

Warn

Audited by Socket on Jun 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The main workflow is coherent with the skill’s purpose and uses GitHub’s official CLI, but the skill also executes unverifiable personal local bash scripts via absolute paths. That extra execution surface is not clearly necessary for issue creation and prevents a fully benign classification.

Confidence: 85%Severity: 62%
Audit Metadata
Analyzed At
Jun 30, 2026, 01:06 AM
Package URL
pkg:socket/skills-sh/Tomlord1122%2Ftomtom-skill%2Fgithub-issue-writer%2F@5392e04c089ddf708f3324df2ff6d6a184658df673b52f0679e6134f635b5762
Security Audit — socket — github-issue-writer