skills/trailofbits/skills/second-opinion/Socket

second-opinion

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill is purpose-aligned and uses official same-org CLIs, so it does not look malicious. Risk is elevated because it exports local code to external LLM providers, installs GitHub-hosted extensions, and runs Gemini with --yolo, which can auto-approve tool actions during analysis.

Confidence: 89%Severity: 67%

Audit Metadata

Analyzed At

Apr 29, 2026, 01:46 PM

Package URL

pkg:socket/skills-sh/trailofbits%2Fskills%2Fsecond-opinion%2F@b51a2f6f6d254b6a7a1288beb31ad883fee5ceae