automate-flutter-app-releases
Warn
Audited by Socket on Sep 27, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s behavior fits its stated release-automation purpose, but its install path is weak: users are told to download and execute an unversioned shell script from a personal Gist, and the workflow invokes additional unpinned tooling. The capabilities are proportionate to mobile release automation, yet the supply-chain trust model is poor enough to warrant caution rather than a benign classification.
Confidence: 89%Severity: 64%
Audit Metadata