game-deploy

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The stated purpose matches deployment behavior, and the here.now/GitHub flows are broadly consistent with hosting a browser game. The main concern is that the default path requires transitive installation of another skill and execution of its local publish.sh, plus forwarding/storing API keys for a third-party hosting service. This is not clearly malicious, but the trust footprint is larger than a simple deployment helper and warrants medium risk.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Apr 22, 2026, 12:02 AM
Package URL
pkg:socket/skills-sh/M4cs%2Fgame-creator%2Fgame-deploy%2F@537d9faf1dce8462bde843daad8b4dc086a0e862