resolve-pr-comments
Warn
Audited by Socket on Mar 3, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill fragment is internally consistent with a legitimate PR review automation purpose. It defines a safe, scoped workflow that interacts with GitHub to resolve existing comments, and relies on standard authenticated APIs and CLI tooling. No malicious behavior or credential harvesting is evident within the provided fragment. Recommend moderate trust with attention to proper access controls and error handling in actual implementation.
Confidence: 75%Severity: 75%
Audit Metadata