editor-test-harvester

Warn

Audited by Socket on Jul 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's purpose and capabilities mostly align: it mines external editor repos, classifies licenses, and writes local harvest reports. Main risk comes from ingesting untrusted repository and issue content while retaining shell/write access, plus optional credential use through the external gitcrawl CLI; install/data-flow trust is not fundamentally incompatible, but it is broader than a purely local documentation skill.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Jul 2, 2026, 05:11 PM
Package URL
pkg:socket/skills-sh/udecode%2Fplate%2Feditor-test-harvester%2F@fa54601f23cf6e5c780a2556829bd885be9580c9a96c8eb99c566cafc474ca14
Security Audit — socket — editor-test-harvester