setup-deploy
Warn
Audited by Socket on May 10, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core deploy-detection and CLAUDE.md writing behavior fits the stated purpose, but the shared gstack preamble materially broadens the footprint with telemetry, artifact sync, extra config mutation, and many helper-binary executions unrelated to deployment setup. This looks more like an over-scoped ecosystem skill than outright malicious content.
Confidence: 83%Severity: 58%
Audit Metadata