skills/fvadicamo/dev-agent-skills/github-pr-review/Socket

github-pr-review

Fail

Audited by Socket on Mar 7, 2026

1 alert found:

Obfuscated File

Obfuscated FileSKILL.md

HIGH

Obfuscated FileHIGH

SKILL.md

The skill's footprint is coherent with its stated purpose: it automates PR review tasks using the official GitHub CLI and Git. It does not display suspicious data flows, credential handling, or external network interactions beyond legitimate GitHub APIs. Overall risk is low-to-medium given the automation of changes and communications to GitHub, with user confirmation acting as a guardrail.

Confidence: 98%

Audit Metadata

Analyzed At

Mar 7, 2026, 08:33 AM

Package URL

pkg:socket/skills-sh/fvadicamo%2Fdev-agent-skills%2Fgithub-pr-review%2F@a22e9c9c878cf61d0533b44a524a6b24759f28b4