skills/vinta/hal-9000/pr/Socket

pr

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core PR workflow is coherent and uses expected Git/GitHub capabilities with no download-execute behavior, but the unverified `write-like-me` dependency introduces a transitive trust boundary, and merge mode enables impactful autonomous repository actions. Risk is moderate rather than malicious.

Confidence: 87%Severity: 52%

Audit Metadata

Analyzed At

Oct 5, 2026, 04:36 PM

Package URL

pkg:socket/skills-sh/vinta%2Fhal-9000%2Fpr%2F@2a79ad1cd246040837bd7e8c20554c2b070a0c86ea0352c896e8be66ad0d2376