Skills
skills/l3digital-net/claude-code-plugins/notifications/Socket

notifications

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill routes GitHub credentials and notification actions through a non-official `gh-manager` CLI without install/provenance details. No clear exfiltration or stealth is shown, yet credential forwarding to third-party tooling and account-state mutation make the footprint riskier than necessary for a notifications skill.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Mar 18, 2026, 01:38 PM
Package URL
pkg:socket/skills-sh/l3digital-net%2Fclaude-code-plugins%2Fnotifications%2F@32c88b99b2d1ee628ca36f1043851ab0491c9027