incubate

Warn

Audited by Socket on Apr 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

BENIGN for stated purpose, but high operational risk. The skill's footprint is coherent with a GitHub development workflow and routes actions to expected GitHub endpoints, yet it grants an agent the ability to create repos, push code, and open issues/PRs autonomously, with documented destructive local cleanup in flash mode.

Confidence: 89%Severity: 72%
Audit Metadata
Analyzed At
Apr 11, 2026, 02:12 PM
Package URL
pkg:socket/skills-sh/Soul-Brews-Studio%2Farra-oracle-skills%2Fincubate%2F@da754cc9042ffe8c61d542d69093d88633d83833