workflow-feature-shipper

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core feature-shipping purpose is coherent, but the skill expands its footprint by chaining to many other skills/tools and an external agent without provenance or data-flow details. The main risk is transitive trust and broad autonomous repo modification, not confirmed malware.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
Oct 9, 2026, 02:40 PM
Package URL
pkg:socket/skills-sh/enuno%2Fclaude-command-and-control%2Fworkflow-feature-shipper%2F@a933b6eefa8c15e4d3241b4208c68b9a5ac15b7acd608a4966e88c620636eb39