skills/unlearndev/skills/code-review/Socket

code-review

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core review function is benign, but arbitrary CLI delegation is broader than necessary and weakens trust boundaries. Main risks are transitive execution of unverified local agents and forwarding untrusted repo content to whatever backend those tools use.

Confidence: 87%Severity: 68%

Audit Metadata

Analyzed At

Mar 18, 2026, 07:38 PM

Package URL

pkg:socket/skills-sh/unlearndev%2Fskills%2Fcode-review%2F@e15196a4b1d6c7b0ed9571b8e68ef23f0b49750f