zentao-release

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

该技能声明的发布管理能力与其命令范围基本一致,未见明显越权文件读取、隐蔽外传或恶意执行指令。主要风险来自对外部 zentao-cli 的依赖及其处理认证凭据,而发布者与 ZenTao 官方组织关系不够清晰,因此更适合归类为可疑/中等风险而非恶意。

Confidence: 81%Severity: 56%
Audit Metadata
Analyzed At
Sep 18, 2026, 01:26 AM
Package URL
pkg:socket/skills-sh/imyuyu%2Fzentao-cli%2Fzentao-release%2F@147f9be365a57fc644fed37eb28a0e172e3507cbedc7a0bc9718070af48375a8
Security Audit — socket — zentao-release