skills/chendrizzy/repo-church/church-uat/Socket

church-uat

Warn

Audited by Socket on May 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the workflow matches UAT in purpose, but the skill's core dependency is an unverifiable `church` CLI with no trusted install or publisher evidence. No clear credential theft or external exfiltration is shown, yet the unknown executable plus broad command execution and lifecycle-changing actions make the skill high-risk.

Confidence: 85%Severity: 78%

Audit Metadata

Analyzed At

May 15, 2026, 04:42 PM

Package URL

pkg:socket/skills-sh/chendrizzy%2Frepo-church%2Fchurch-uat%2F@ac350a3ea0c73f5095a7f3ac128b389159adec45