product-hunt-launch

Warn

Audited by Socket on Jun 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's functionality broadly matches Product Hunt launch support, but it requires installing a separate skill and using a third-party CLI that brokers remote search and image-generation apps. The footprint is somewhat disproportionate for a launch-advice skill and introduces transitive trust and external data-routing risk, though there is no clear evidence of credential theft or malware.

Confidence: 85%Severity: 69%
Audit Metadata
Analyzed At
Jun 19, 2026, 02:15 AM
Package URL
pkg:socket/skills-sh/halt-catch-fire%2Fskills%2Fproduct-hunt-launch%2F@d0e55da80bd3130cfd1141ce9ea5117421592f7b1a8b2670b2041bba91ad1ec9
Security Audit — socket — product-hunt-launch