babysit

Warn

Audited by Socket on Apr 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill is purpose-aligned for PR babysitting and its main external tooling is official GitHub/git, with no clear credential theft or off-platform exfiltration. However, it grants an agent broad unattended authority to edit code, resolve conflicts, force-push, rerun CI, manage scheduled tasks, and delegate to another unreviewed skill, making it a high operational-risk automation skill even without evidence of malware.

Confidence: 85%Severity: 76%
Audit Metadata
Analyzed At
Apr 20, 2026, 05:29 AM
Package URL
pkg:socket/skills-sh/rube-de%2Fcc-skills%2Fbabysit%2F@3820f7fdcc1bca7b4480d0a0fdda7438c6c9bfdd