workflow-deployment

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose fits deployment orchestration, but the skill is mostly a thin wrapper around opaque slash commands with unclear provenance and mandatory autonomous execution. The main risk is hidden downstream behavior and possible real-world deployment actions, not confirmed malware.

Confidence: 82%Severity: 71%
Audit Metadata
Analyzed At
Apr 10, 2026, 07:28 AM
Package URL
pkg:socket/skills-sh/duc01226%2Feasyplatform%2Fworkflow-deployment%2F@334cb8ebbeaf73239a5170c74548c82aeecc583c
Security Audit — socket — workflow-deployment