create-repository
Warn
Audited by Socket on Aug 31, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the bootstrap purpose is coherent, but it delegates full authority to unprovided release-bundled instructions selected via GitHub Releases. Main risk is supply-chain and transitive trust expansion, not confirmed malicious behavior; no direct credential harvesting or exfiltration is evident from the snippet.
Confidence: 84%Severity: 56%
Audit Metadata