church-ship

Warn

Audited by Socket on May 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s stated purpose is coherent, but it relies on an undocumented and unverifiable local `church` CLI. With no install source, publisher linkage, or release verification, the main risk is supply-chain trust rather than confirmed malicious behavior.

Confidence: 86%Severity: 78%
Audit Metadata
Analyzed At
May 15, 2026, 04:42 PM
Package URL
pkg:socket/skills-sh/chendrizzy%2Frepo-church%2Fchurch-ship%2F@9001665956d4f227881c4bb579a9edc9b98f7258
Security Audit — socket — church-ship