setup-deploy

Warn

Audited by Socket on May 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is modest deploy configuration, but the skill’s actual footprint is much broader. It invokes numerous opaque local binaries, performs telemetry/artifact-sync behavior, reads broad user/project state, and can mutate repo config and git history. This looks more like a general gstack bootstrap/orchestrator wrapper than a narrowly scoped deploy-setup skill.

Confidence: 83%Severity: 81%
Audit Metadata
Analyzed At
May 16, 2026, 12:55 PM
Package URL
pkg:socket/skills-sh/garrytan%2Fgstack%2Fsetup-deploy%2F@63cad2fadaf2e216b70eec3abb9c96bdd5f1f444
Security Audit — socket — setup-deploy