lisa-integration-test

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is purpose-aligned for integration testing, but its footprint is high-risk because it executes arbitrary downstream project scripts, edits two repositories, and performs autonomous git commit/push actions. No obvious credential harvesting or third-party exfiltration is present, so this is not confirmed malware, but it is a high-risk automation skill.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Mar 18, 2026, 03:42 PM
Package URL
pkg:socket/skills-sh/codyswanngt%2Flisa%2Flisa-integration-test%2F@7ed9ca56394589b46db39e89c7d4b5a6eeb0b552