run

Warn

Audited by Socket on Nov 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The workflow instructions are scoped to project execution and include meaningful approval and verification gates. The main unresolved risk is reliance on two required CLI binaries whose provenance is not established by the supplied evidence; verify their official sources before use. No evidence of credential theft or intentional exfiltration appears in the skill text.

Confidence: 88%Severity: 70%
Audit Metadata
Analyzed At
Nov 8, 2026, 10:00 AM
Package URL
pkg:socket/skills-sh/andrewy1n%2Forchestra%2Frun%2F@d7fa6ffaddf20a08fedafe9118e71ee82d358f4c68861b15d4d73c5010912f5b