skills/jeremylongshore/claude-code-plugins-plus-skills/granola-ci-integration/Socket

granola-ci-integration

Warn

Audited by Socket on Mar 24, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's purpose is plausible and its main data flows to Granola, GitHub, Slack, Linear, and Zapier are broadly consistent with that purpose, but the granted tool scope is wider than necessary for a setup/integration skill. The main concerns are broad `curl`/`gh` execution permissions and automation over untrusted meeting-note content that can cause external side effects.

Confidence: 83%Severity: 57%

Audit Metadata

Analyzed At

Mar 24, 2026, 05:21 PM

Package URL

pkg:socket/skills-sh/jeremylongshore%2Fclaude-code-plugins-plus-skills%2Fgranola-ci-integration%2F@7688abd45a19286d97c4f04f414ded6420602f39