skills/vtmocanu/skills/prd-done/Socket

prd-done

Warn

Audited by Socket on Aug 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's Git/GitHub capabilities mostly match its stated PR workflow purpose, and its only named external tool is official GitHub CLI. The main risk is disproportionate autonomy plus indirect prompt-injection: it asks the agent to ingest untrusted PR template/review/web content and may execute commands derived from that content while also being able to push, merge, and close issues.

Confidence: 86%Severity: 66%

Audit Metadata

Analyzed At

Aug 10, 2026, 06:24 PM

Package URL

pkg:socket/skills-sh/vtmocanu%2Fskills%2Fprd-done%2F@39d46986c5c8aa286677b26beae6345525cb552440721c06717662cb47b4f67a