skills/yeachan-heo/oh-my-opencode-lite/work-with-pr/Socket

work-with-pr

Warn

Audited by Socket on Aug 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is broadly aligned with PR automation and uses mostly official tooling, so it is not outright malicious. Risk comes from autonomous real-world actions (push/create/merge/delete), transitive trust in other skills, and sending repository context to external review services whose provenance and data handling are not fully specified here.

Confidence: 88%Severity: 56%

Audit Metadata

Analyzed At

Aug 1, 2026, 02:36 PM

Package URL

pkg:socket/skills-sh/Yeachan-Heo%2Foh-my-opencode-lite%2Fwork-with-pr%2F@586c0ca251757e31c4d14a7b2a19b40e4c7cef58f6b9ad85f2dc79969677e55b