python3-development

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Anomaly
AnomalyLOW
assets/hatch_build.py

The fragment is a conventional build hook for compiling native binaries, but it intentionally executes repository-provided scripts during package builds. This creates a significant supply-chain execution point; the shown code contains no direct evidence of credential theft, exfiltration, persistence, or other malware. The risk depends primarily on the unseen build scripts and the integrity of the package source.

Confidence: 97%Severity: 58%
Audit Metadata
Analyzed At
Sep 21, 2026, 05:11 PM
Package URL
pkg:socket/skills-sh/jamie-bitflight%2Fclaude_skills%2Fpython3-development%2F@76c4c940fccd6ded4b87d1a9d863ab19c3ad6cd368bba57935005c59be4f983f