skills/chendrizzy/repo-church/church-intake/Socket

church-intake

Warn

Audited by Socket on May 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the documented purpose is coherent, but the skill relies on an unverifiable external 'church' CLI with no trustworthy distribution or publisher evidence. There is no clear malicious data exfiltration or credential harvesting in the text, yet the unresolved binary provenance alone makes the skill high risk.

Confidence: 82%Severity: 72%

Audit Metadata

Analyzed At

May 15, 2026, 04:41 PM

Package URL

pkg:socket/skills-sh/chendrizzy%2Frepo-church%2Fchurch-intake%2F@18a2f771f7756a1218916783880c8393ce7e63ee