test-setup

Warn

Audited by Socket on Jul 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is purpose-aligned and not directly malicious, but the generated CI templates introduce medium risk through third-party GitHub Actions, especially the Unity workflow forwarding UNITY_LICENSE to GameCI. Official GitHub actions are used for checkout/artifacts, but mutable tag pinning and third-party action trust make the footprint riskier than a purely local scaffolding skill.

Confidence: 90%Severity: 62%
Audit Metadata
Analyzed At
Jul 10, 2026, 09:21 PM
Package URL
pkg:socket/skills-sh/bullish0x%2FGameStudio%2Ftest-setup%2F@f129886e6595170123defb9514d017df82014b400eb1766b883babc96ecfb025