setup-deploy
Warn
Audited by Socket on May 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated purpose is modest deploy configuration, but the skill’s actual footprint is much broader. It invokes numerous opaque local binaries, performs telemetry/artifact-sync behavior, reads broad user/project state, and can mutate repo config and git history. This looks more like a general gstack bootstrap/orchestrator wrapper than a narrowly scoped deploy-setup skill.
Confidence: 83%Severity: 81%
Audit Metadata