skills/whizzzkid/skills/wk-jira/Socket

wk-jira

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: mostly coherent Jira/PR automation with official-seeming data flows, but it performs autonomous external writes, depends on an unpinned MCP connector, and instructs a transitive skill invocation. This is not confirmed malware, but it is higher-risk than a simple read-only Jira helper.

Confidence: 85%Severity: 63%

Audit Metadata

Analyzed At

Aug 24, 2026, 09:51 PM

Package URL

pkg:socket/skills-sh/whizzzkid%2Fskills%2Fwk-jira%2F@39dd75de2228c79ae3b796348c09c010ce71712254aa0c9c025a6e41db1f94e4