koda-todo

Pass

Audited by Socket on Jun 23, 2026

Checks

Malicious behaviorInjection, exfiltration, untrusted installs

Security concernsCredential exposure, tool/trust exploitation

Code obfuscationHidden or obfuscated code

Suspicious patternsReconnaissance, excessive autonomy, resource use

Audit Metadata

Analyzed At

Jun 23, 2026, 04:45 AM

Package URL

pkg:socket/skills-sh/XCode-NLP%2FKodaSkills%2Fkoda-todo%2F@419424be4f3eabf17be449989dcfded0000764cf6d3af039bfb1a910142e2411