send-it

Warn

Audited by Socket on Aug 25, 2026

1 alert found:

Security
SecurityMEDIUM
tests/fixtures/typescript-sensitive-literals.ts

This fragment is highly suspicious due to numerous hardcoded secret/credential-like values (GitHub, Slack, AWS, and Bearer/JWT-like authorization) and calls to helper functions that likely resolve and/or read additional secrets. No explicit exfiltration or malicious sinks are visible in this snippet alone, but the credential exposure risk is extreme and the intent to use/manage authentication material is clear. Further review of the referenced helper implementations and downstream usage is necessary to confirm whether any exfiltration or malicious persistence occurs.

Confidence: 70%Severity: 88%
Audit Metadata
Analyzed At
Aug 25, 2026, 10:36 PM
Package URL
pkg:socket/skills-sh/robin-liquidium%2Fagent-skills%2Fsend-it%2F@dd25a4ec62348cd369dcfade2edbf7e720a28e514861693a031ef7209f6d0ef7
Security Audit — socket — send-it