skills/yangliu2060/smith--skills/claude-review/Socket

claude-review

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core purpose is coherent and the Claude CLI comes from an official same-org source, but the skill grants Claude `bypassPermissions` and transitively invokes unverified third-party skills in the same session. Risk is driven more by excessive execution trust and inherited permissions than by confirmed malicious behavior.

Confidence: 86%Severity: 68%

Audit Metadata

Analyzed At

Apr 21, 2026, 10:57 AM

Package URL

pkg:socket/skills-sh/yangliu2060%2Fsmith--skills%2Fclaude-review%2F@81149e7c1d9bf0b361eb187e67bdc0db29e2769b