skills/vamgan/review-to-rule/review-to-rule-write/Socket

review-to-rule-write

Warn

Audited by Socket on Aug 31, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The stated purpose is plausible, but the skill’s footprint depends on an unverifiable external CLI that can write to repositories and potentially use GitHub credentials to publish PRs. The strongest risks are black-box supply chain trust and transforming untrusted review content into persistent repo changes.

Confidence: 82%Severity: 82%

Audit Metadata

Analyzed At

Aug 31, 2026, 08:27 PM

Package URL

pkg:socket/skills-sh/vamgan%2Freview-to-rule%2Freview-to-rule-write%2F@8a1d412dced959d7ef25fb71e676f755c134553b9e452de3dc2498d1a016cde8