create-repository

Warn

Audited by Socket on Aug 31, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the bootstrap purpose is coherent, but it delegates full authority to unprovided release-bundled instructions selected via GitHub Releases. Main risk is supply-chain and transitive trust expansion, not confirmed malicious behavior; no direct credential harvesting or exfiltration is evident from the snippet.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Aug 31, 2026, 09:26 AM
Package URL
pkg:socket/skills-sh/lutzseverino%2Frepository-standards%2Fcreate-repository%2F@c0c779a52183cd68131868fe1c9ffc2d692748db81e78586e0b3c4e10f55b644
Security Audit — socket — create-repository