automate-flutter-app-releases

Warn

Audited by Socket on Sep 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s behavior fits its stated release-automation purpose, but its install path is weak: users are told to download and execute an unversioned shell script from a personal Gist, and the workflow invokes additional unpinned tooling. The capabilities are proportionate to mobile release automation, yet the supply-chain trust model is poor enough to warrant caution rather than a benign classification.

Confidence: 89%Severity: 64%
Audit Metadata
Analyzed At
Sep 27, 2026, 08:23 PM
Package URL
pkg:socket/skills-sh/rodydavis%2Fskills%2Fautomate-flutter-app-releases%2F@3a3d9c530648113aa76bb2a20738cc9ed97674a77f5f6c5b3b8c07aa7d459c91