github-code-review
Fail
Audited by Socket on Apr 2, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
SUSPICIOUS. The stated purpose matches GitHub code review automation, but the footprint is high-risk: it combines untrusted external content, third-party CLI/package execution, and autonomous GitHub actions such as commenting, approval, push, and merge. Without stronger provenance for ruv-swarm/claude-flow and tighter guardrails on comment-triggered execution, the skill is not proportionately scoped for safe agent use.
Confidence: 84%Severity: 82%
Audit Metadata