skills/utarn/engineer-skills/code-review/Socket

code-review

Warn

Audited by Socket on Aug 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core code-review behavior is coherent and proportionate, but the skill introduces medium risk through transitive installation of `/setup-utarn-skills` and processing of untrusted external/repo content in sub-agents. No direct credential harvesting, covert behavior, or clear malicious data exfiltration is present in the provided skill text.

Confidence: 84%Severity: 52%

Audit Metadata

Analyzed At

Aug 16, 2026, 04:31 AM

Package URL

pkg:socket/skills-sh/utarn%2Fengineer-skills%2Fcode-review%2F@f82b1f0b2c249113d428c812f1c396388d143317418cbff5cca87cf1e88d74fe