aso

Warn

Audited by Socket on Aug 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s ASO and fastlane capabilities broadly match its stated purpose, but its footprint is enlarged by mandatory dependence on a third-party authenticated `aso` CLI with weaker provenance and optional third-party `asc` fallback. The publishing workflow is impactful but partially constrained by a preview/approval step. Main concern is install trust and credential forwarding to non-official tooling, not confirmed malware.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Aug 11, 2026, 05:22 PM
Package URL
pkg:socket/skills-sh/asomaniac%2Faso-skills%2Faso%2F@527152fa0f6515073cd6284a39d9ad1f0c9c13c643a42a51cd360a63af0ccc6c