yolo

Fail

Audited by Socket on Mar 18, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

SUSPICIOUS: The skill's purpose and capabilities are broadly aligned, and its external dependency appears to be Anthropic's official Chrome extension rather than an unknown payload. However, it enables autonomous live deployment actions after git push through browser automation on a logged-in session, which creates meaningful operational and security risk even without obvious credential theft or malicious exfiltration.

Confidence: 87%Severity: 72%
Audit Metadata
Analyzed At
Mar 18, 2026, 08:05 PM
Package URL
pkg:socket/skills-sh/10k-digital%2Flovable-claude-code%2Fyolo%2F@61a45963f4d874a3662caeb72e7383c881d680d9