skills/fortunto2/solo-factory/solo-ios-release/Socket

solo-ios-release

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The main release workflow is coherent, but the skill misrepresents an unofficial third-party CLI as official and forwards Apple API credentials into it. That credential-forwarding, combined with optional unrelated analytics exfiltration to a third-party domain, makes the footprint broader and riskier than a narrowly scoped iOS release skill.

Confidence: 91%Severity: 82%

Audit Metadata

Analyzed At

Oct 9, 2026, 11:42 AM

Package URL

pkg:socket/skills-sh/fortunto2%2Fsolo-factory%2Fsolo-ios-release%2F@b342200a5fe8437f4fb60c0f770c22bbfda9c1a19fe64c9e100ee2276000bb02