sc-code-review

Fail

Audited by Socket on Mar 10, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill content is coherently aligned with its stated purpose as a multi-model code-review orchestrator. It relies on standard development tooling (git, gh) and PAL MCP for consensus, with no evident credential harvesting, unconstrained network activity, or deceptive data flows. The footprint is proportionate to its described functionality and does not introduce unnecessary access or risky supply-chain behavior. Overall, the skill appears benign with moderate security risk due to external model calls and PR postings, but no concrete indicators of malicious activity are present.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 10, 2026, 06:42 AM
Package URL
pkg:socket/skills-sh/tony363%2Fsuperclaude%2Fsc-code-review%2F@8f0a5e225b7b75b0b53d18c05cad29910d60f3d1