skills/crissmoldovan/agent-skills/release-ledger/Socket

release-ledger

Warn

Audited by Socket on Sep 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's stated purpose is coherent and the architecture guidance is proportionate, but it asks the agent to install companion skills from a remote pack, creating transitive trust and supply-chain exposure not fully verifiable from this skill alone. No clear credential theft, exfiltration, or concealment is present in the provided content.

Confidence: 87%Severity: 63%

Audit Metadata

Analyzed At

Sep 13, 2026, 03:34 PM

Package URL

pkg:socket/skills-sh/crissmoldovan%2Fagent-skills%2Frelease-ledger%2F@5d4ac7e1712231ec0e99f34ef7e280d02a4e66f9fe334951f5b02370251b6f2f