implement

Warn

Audited by Socket on Mar 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The code fragment represents a high-level orchestration spec for a Jira ticket processing skill that coordinates multiple sub-skills to perform end-to-end ticket analysis, design review, planning, and validation. While the intent is legitimate, the footprint involves significant integration with external services, potential credential usage, and execution of actions that affect repositories and frontend UI. This pattern is not inherently malicious, but it carries notable supply-chain and operational risk due to credential handling, external tool invocations, and ability to perform live changes. It should be reviewed for secure credential management, access controls, and explicit user consent for frontend/UI changes before deployment.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Mar 1, 2026, 03:27 PM
Package URL
pkg:socket/skills-sh/delexw%2Fclaude-code-misc%2Fimplement%2F@97a17e66b5daff234b09f77360b82b9d19e3fa57