software-signing

Pass

Audited by Socket on Jul 18, 2026

Checks

Malicious behaviorInjection, exfiltration, untrusted installs

Security concernsCredential exposure, tool/trust exploitation

Code obfuscationHidden or obfuscated code

Suspicious patternsReconnaissance, excessive autonomy, resource use

Audit Metadata

Analyzed At

Jul 18, 2026, 12:09 PM

Package URL

pkg:socket/skills-sh/RedHatProductSecurity%2Fprodsec-skills%2Fsoftware-signing%2F@80b7c2611df31945a32de78f3e93647da46044ee8dfb8d07f5a5b8d945b73787