setup-deploy

Warn

Audited by Socket on May 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core deploy-detection and CLAUDE.md writing behavior fits the stated purpose, but the shared gstack preamble materially broadens the footprint with telemetry, artifact sync, extra config mutation, and many helper-binary executions unrelated to deployment setup. This looks more like an over-scoped ecosystem skill than outright malicious content.

Confidence: 83%Severity: 58%
Audit Metadata
Analyzed At
May 10, 2026, 12:18 PM
Package URL
pkg:socket/skills-sh/garrytan%2Fgstack%2Fsetup-deploy%2F@98c27879eb2ff7e41e8b391fa9ba80155a142282