money-product
Warn
Audited by Socket on Sep 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s main capabilities largely match its product-launch purpose, and its primary vendor flows appear official. However, it grants unusually broad real-world authority across deployment, payments, monitoring, rollback, and outbound comms, and it chains into multiple other skills. The optional ccapi.ai path adds a third-party data-flow concern. This looks more like a high-trust operations orchestrator than a narrowly scoped build helper.
Confidence: 84%Severity: 68%
Audit Metadata