skills/camoa/claude-skills/contribution-submit/Socket

contribution-submit

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s core behavior matches its stated Drupal contribution purpose, and data flows appear to official Drupal/GitLab services. Main risk comes from transitive trust in other skills and use of a third-party `drupalorg-cli` PHAR with weaker provenance, not from clear malicious behavior or hidden exfiltration.

Confidence: 87%Severity: 55%

Audit Metadata

Analyzed At

Oct 9, 2026, 12:41 PM

Package URL

pkg:socket/skills-sh/camoa%2Fclaude-skills%2Fcontribution-submit%2F@61cbf7400d3da00f3c6da7fa0ddd8cfc0b59681509d03a91376d95e1a81e57e7