help

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Security
SecurityMEDIUM
references/software-craft/references/ship-change/SKILL.md

BENIGN in intent but HIGH operational risk: the capabilities align with a software delivery skill and no malicious data flows or suspicious installers are visible, yet it authorizes impactful package publication and service deployment actions using existing credentials. Main concern is autonomous real-world change execution and broad operational scope, not malware or exfiltration.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Sep 21, 2026, 07:54 PM
Package URL
pkg:socket/skills-sh/andrueandersoncs%2Fskills%2Fhelp%2F@31d840dfe75d8b04e2a5f68d1117b41ebbedf5094fc3fb58f0ac7eb85523adf2