skills/bnadlerjr/dotfiles/reviewing-code-perfectly/Socket

reviewing-code-perfectly

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the core review purpose is coherent, and GitHub CLI usage is proportionate, but the skill depends on an unverifiable `pr-review-worktree` executable and instructs transitive loading of other skills. The main concern is install/execution trust rather than confirmed malicious behavior.

Confidence: 86%Severity: 74%

Audit Metadata

Analyzed At

Mar 28, 2026, 10:18 PM

Package URL

pkg:socket/skills-sh/bnadlerjr%2Fdotfiles%2Freviewing-code-perfectly%2F@a576ade9905505145b11048395dff121ab2e418b