skills/adaptyteam/adapty-skills/adapty-integration/Socket

adapty-integration

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: most capabilities align with an Adapty integration skill, and the official Adapty CLI/docs usage appears coherent. The main issue is the optional feedback phase sending user/app metadata to an unverifiable free-hosted Vercel endpoint instead of an official Adapty domain, plus transitive skill installation and mutable @latest execution.

Confidence: 91%Severity: 68%

Audit Metadata

Analyzed At

Sep 4, 2026, 09:08 AM

Package URL

pkg:socket/skills-sh/adaptyteam%2Fadapty-skills%2Fadapty-integration%2F@78e19f414ae5370d551bf5c6ff17ca99067acdd6717ef1323772dda217da7b96