skills/zhangyu1818/skills/gh-pr-codex-review-loop/Socket

gh-pr-codex-review-loop

Warn

Audited by Socket on Sep 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose matches PR review automation and the data flows stay within official GitHub tooling, so this is not overtly malicious. However, it grants autonomous write/merge behavior and executes an unreviewed bundled local script, which raises medium risk until that script is inspected.

Confidence: 85%Severity: 52%

Audit Metadata

Analyzed At

Sep 30, 2026, 06:30 AM

Package URL

pkg:socket/skills-sh/zhangyu1818%2Fskills%2Fgh-pr-codex-review-loop%2F@839882d915dc858dd8b95434cf728e0561bcc7e6afcecbad9859a9d2427c8688