land-and-deploy
Warn
Audited by Socket on Sep 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s capabilities broadly match its stated land-and-deploy purpose, and most network actions target official GitHub/git/browser paths. Risk comes from high-impact automation, reliance on local helper binaries/tooling, eval of helper-script output, and optional browser actions against real accounts; these are proportionate for release engineering but still medium-high security risk rather than benign.
Confidence: 89%Severity: 62%
Audit Metadata