skills/akhan157/recoverysys/setup-deploy/Socket

setup-deploy

Warn

Audited by Socket on Jun 20, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core deploy-detection behavior is legitimate, and the helper binaries appear same-org official, but the skill’s actual footprint is much broader than its stated purpose. Unrelated telemetry, routing injection, vendoring migration, optional remote logging, and automatic commits make it disproportionate for a simple setup-deploy workflow.

Confidence: 83%Severity: 68%

Audit Metadata

Analyzed At

Jun 20, 2026, 12:54 AM

Package URL

pkg:socket/skills-sh/akhan157%2FRecoverySys%2Fsetup-deploy%2F@9479be38884497877268fd249ccfd5b848fc0ee7b913d2f4211066efa92060f4