release-landing

Warn

Audited by Socket on Jul 5, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the visible skill is mostly a routing/documentation layer, but it includes explicit transitive skill installation through an unseen local installer and registry. Without the installer and source mappings, install provenance and downstream data flows cannot be verified, so the release-focused purpose is only partially aligned with its actual trust footprint.

Confidence: 81%Severity: 62%
Audit Metadata
Analyzed At
Jul 5, 2026, 04:26 PM
Package URL
pkg:socket/skills-sh/alvarovillalbaa%2Fplugins%2Frelease-landing%2F@4ce881b6fd72d730876db04a776586cc2e6ca28298f930453e53919a8a4a5454
Security Audit — socket — release-landing