price-change

Warn

Audited by Socket on Oct 7, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is largely purpose-aligned for coordinated pricing operations, and its external data flow is mainly to official Stripe plus normal git remotes. However, it enables high-impact autonomous real-world actions on production billing and direct pushes to main across three repos, so the overall security risk is elevated despite limited malware evidence.

Confidence: 89%Severity: 74%
Audit Metadata
Analyzed At
Oct 7, 2026, 06:40 AM
Package URL
pkg:socket/skills-sh/psquared-development%2Fpsquared-skills%2Fprice-change%2F@21e193342db9c1477c7560c1508bda83c3bd8655e167b94d3b685a5125b64eb0