improve-codebase-architecture
Warn
Audited by Socket on Mar 26, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core architecture-analysis purpose is coherent, and the GitHub CLI usage is official and proportionate, but the skill crosses into high-risk behavior by requiring the agent to create a GitHub issue without explicit per-action approval. Main concern is autonomous external posting, not malware or credential theft.
Confidence: 88%Severity: 74%
Audit Metadata