land-and-deploy

Warn

Audited by Socket on Sep 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities broadly match its stated land-and-deploy purpose, and most network actions target official GitHub/git/browser paths. Risk comes from high-impact automation, reliance on local helper binaries/tooling, eval of helper-script output, and optional browser actions against real accounts; these are proportionate for release engineering but still medium-high security risk rather than benign.

Confidence: 89%Severity: 62%
Audit Metadata
Analyzed At
Sep 30, 2026, 07:11 AM
Package URL
pkg:socket/skills-sh/garrytan%2Fgstack%2Fland-and-deploy%2F@f274f318132cd5923a89d973814f66179c8f549d1ba99f470c9fc203c8e59d76
Security Audit — socket — land-and-deploy