crafter-ship

Warn

Audited by Socket on Aug 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Mostly coherent shipping workflow with useful guardrails and limited file access. The main concern is install trust: the skill asks the agent to globally install and authenticate through an only partially verified third-party CLI, so this is better classified as suspicious/medium-risk rather than benign.

Confidence: 81%Severity: 56%
Audit Metadata
Analyzed At
Aug 14, 2026, 03:25 AM
Package URL
pkg:socket/skills-sh/crafter-station%2Fcrafter.run%2Fcrafter-ship%2F@481f4795062d9b9a7e0388a4451424ce5c3e2a75597a4f259914e6b6abb0d2cd
Security Audit — socket — crafter-ship