money-product

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s main capabilities largely match its product-launch purpose, and its primary vendor flows appear official. However, it grants unusually broad real-world authority across deployment, payments, monitoring, rollback, and outbound comms, and it chains into multiple other skills. The optional ccapi.ai path adds a third-party data-flow concern. This looks more like a high-trust operations orchestrator than a narrowly scoped build helper.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
Sep 23, 2026, 10:07 AM
Package URL
pkg:socket/skills-sh/iamzifei%2Fshow-me-the-money%2Fmoney-product%2F@e58dbf6bea44a8de308d5b14b126a063619691f808207f629615c5a7ca15661d