build

Warn

Audited by Socket on Apr 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose matches a build orchestration lane, but its footprint is high-trust and broad. Main risks are transitive local-skill execution, arbitrary URL processing alongside write/commit abilities, and autonomous ship actions; there is no evidence of explicit credential theft, malware payloads, or third-party exfiltration endpoints in this snippet.

Confidence: 83%Severity: 68%
Audit Metadata
Analyzed At
Apr 7, 2026, 12:57 PM
Package URL
pkg:socket/skills-sh/itsAR-VR%2Fgoatedskills%2Fbuild%2F@04766f1634ffdc747738b4df7b0bd8599be01e26