skills/openshift/release-tests/release-workflow/Socket

release-workflow

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is mostly coherent with its stated OpenShift release-workflow purpose and uses expected Red Hat/OpenShift endpoints, but it enables high-impact release actions and processes untrusted external content to drive those actions. Risk is moderate due to real-world workflow control and indirect prompt-injection surface, not confirmed malware.

Confidence: 82%Severity: 54%

Audit Metadata

Analyzed At

Oct 5, 2026, 06:03 AM

Package URL

pkg:socket/skills-sh/openshift%2Frelease-tests%2Frelease-workflow%2F@609fd881f8d335bda154f91ba83ef709ac6fbab5e5639d5ee507e3e715acee2a