press-release-writing

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the writing guidance itself is benign, but the skill’s real footprint depends on a transitive external CLI/skill install, external login, and remote app execution that are not clearly necessary or verifiably official for a press-release formatter. The data flows are plausible for research, yet the install trust and credential-forwarding model are disproportionate enough to raise material security concerns.

Confidence: 84%Severity: 81%
Audit Metadata
Analyzed At
Jul 23, 2026, 06:06 PM
Package URL
pkg:socket/skills-sh/magentosh%2Fskills%2Fpress-release-writing%2F@50fead7d095de5a2aa2a8a72c7896fd940cfbb46bfe36e581ae13e35b61021b1
Security Audit — socket — press-release-writing