skills/aiskillstore/marketplace/promote-skill/Socket

promote-skill

Warn

Audited by Socket on Aug 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the purpose is coherent, but the skill’s footprint is broad for a publishing helper because it spans many third-party marketplaces, CLIs, and optional credentials. Main concerns are supply-chain trust in external CLIs and credential forwarding to vendor-managed tooling like sh1pt cloud, not confirmed malware or hidden exfiltration.

Confidence: 79%Severity: 57%

Audit Metadata

Analyzed At

Aug 5, 2026, 06:55 PM

Package URL

pkg:socket/skills-sh/aiskillstore%2Fmarketplace%2Fpromote-skill%2F@581bc21ffbef6ac91740a25795f1d1079add35cd9a5876bca3cdce91b9550a64