workflow-feature-shipper
Warn
Audited by Socket on Oct 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core feature-shipping purpose is coherent, but the skill expands its footprint by chaining to many other skills/tools and an external agent without provenance or data-flow details. The main risk is transitive trust and broad autonomous repo modification, not confirmed malware.
Confidence: 82%Severity: 58%
Audit Metadata