skills/kntnt/skills/release/Socket

release

Warn

Audited by Socket on Oct 21, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose matches a release automation skill, and the outbound destinations are proportionate, but core execution is delegated to unreviewed local scripts and another skill file. The main concern is execution trust and transitive trust, not confirmed malware or credential exfiltration.

Confidence: 84%Severity: 72%

Audit Metadata

Analyzed At

Oct 21, 2026, 10:41 AM

Package URL

pkg:socket/skills-sh/kntnt%2Fskills%2Frelease%2F@a4d73001b9c7edd0a3bb3b66000817bd55ff1b9c